Read the docs

cedcommerce

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

cedcommerce records in CISA KEV

No cedcommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wholesale Market For Woocommerce 4 records HIGH Wholesale Market 2 records HIGH One Click Order Re-order 1 record LOW Recently Viewed And Most Viewed Products 1 record LOW Smsa Shipping For Woocommerce 1 record MEDIUM

Records

1 record in One Click Order Re-order · all components

TI-2024-05238 CVE-2024-5641 · GHSA-2wx3-jm7x-4xg5

One Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

Priority LOW 28

The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00299 Published 2024-07-04 No fix listed CWE-862
Open these records in search →