Known vulnerabilities in Hippoo Mobile App for WooCommerce

Hippoo helps you manage WooCommerce orders, inventory, and analytics from your mobile. Receive real-time notifications and control your store on the g …

4Reported vulnerabilities

9.8Highest CVSS score

1.10.3Latest version

1,000+Active installs

What to do now

Update Hippoo Mobile App for WooCommerce to 1.9.6 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 10, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-10580	Critical 9.8	2.9%	0 to 1.9.4 (inclusive)	`1.9.5`	June 5, 2026
CVE-2025-13339	High 7.5	2.2%	1.7.1 and earlier	`1.7.2`	December 9, 2025
CVE-2026-49065	Medium 5.3	0.2%	1.9.5 and earlier	`1.9.6`	June 8, 2026
CVE-2025-12655	Medium 5.3	0.3%	0 to 1.7.1 (inclusive)	`1.7.2`	December 12, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.