Read the docs

All In One B2b For Woocommerce Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

All In One B2b For Woocommerce Project records in CISA KEV

No All In One B2b For Woocommerce Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
All In One B2b For Woocommerce 2 records HIGH

Records

2 records

TI-2023-03310 CVE-2023-3547 · GHSA-45j4-484p-rcm6

All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF

Priority HIGH 73

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00394 Published 2023-09-25 No fix listed
TI-2023-04334 CVE-2023-4703 · GHSA-8wmq-h9m8-m384

All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation

Priority HIGH 68

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00687 Published 2024-01-16 No fix listed
Open these records in search →