Read the docs

Addify

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Addify records in CISA KEV

No Addify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Role Based Pricing For Woocommerce 2 records HIGH Abandoned Cart Recovery 1 record MEDIUM Advanced Free Gifts 1 record MEDIUM Automatic User Roles Switcher 1 record MEDIUM Checkout Fields Manager 1 record MEDIUM Custom Fields For Woocommerce 1 record MEDIUM Custom Order Number 1 record MEDIUM Custom Registration Forms Builder 1 record MEDIUM

Records

2 records in Role Based Pricing For Woocommerce · all components

TI-2022-03257 CVE-2022-3537 · GHSA-wxff-8g4p-xj2g

Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload

Priority HIGH 73

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00657 Published 2022-11-07 Fixed in 1.6.2 CWE-352
TI-2022-03256 CVE-2022-3536 · GHSA-fch5-fx89-m666

Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization

Priority HIGH 73

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subsc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00674 Published 2022-11-07 Fixed in 1.6.3 CWE-352
Open these records in search →