WordPress security by component

Hippoo Mobile App for WooCommerce

Plugin description

Hippoo Mobile App for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 10, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: hippoo-mobile-app-for-woocommerce

Latest vulnerability

CVE-2025-13339: Hippoo Mobile App for WooCommerce: Filesystem traversal

Hippoo Mobile App for WooCommerce is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedDec 10, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 10, 2025	CVE-2025-13339 Hippoo Mobile App for WooCommerce: Filesystem traversal Hippoo Mobile App for WooCommerce is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending