Read the docs

acowebs

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

acowebs records in CISA KEV

No acowebs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Product Labels For Woocommerce (sale Badges) 3 records MEDIUM Pdf Invoices And Packing Slips For Woocommerce 2 records MEDIUM Dynamic Pricing With Discount Rules For Woocommerce 1 record LOW

Records

3 records in Product Labels For Woocommerce (sale Badges) · all components

TI-2024-11231 CVE-2024-12109 · GHSA-cw73-w3vc-7g28

Product Labels For Woocommerce < 1.5.9 - Admin+ SQLi

Priority MEDIUM 52

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00342 Published 2025-03-25 Fixed in 1.5.9 CWE-89
TI-2024-09859 CVE-2024-10638 · GHSA-gqcv-v7gm-vw94

Product Labels For Woocommerce < 1.5.11 - Admin+ SQLi

Priority MEDIUM 52

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00417 Published 2025-03-25 Fixed in 1.5.11 CWE-89
TI-2024-16400 CVE-2024-24886 · GHSA-h232-jmfv-j93c

WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acowebs Product Labels For Woocommerce (Sale Badges) allows Stored XSS.This issue affects Product Labels For Woocommer…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00307 Published 2024-02-08 No fix listed CWE-79
Open these records in search →