Read the docs

cedcommerce

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

cedcommerce records in CISA KEV

No cedcommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wholesale Market For Woocommerce 4 records HIGH Wholesale Market 2 records HIGH One Click Order Re-order 1 record LOW Recently Viewed And Most Viewed Products 1 record LOW Smsa Shipping For Woocommerce 1 record MEDIUM

Records

1 record in Smsa Shipping For Woocommerce · all components

TI-2022-03755 CVE-2022-4107 · GHSA-2f42-3cfg-m57p

SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download

Priority MEDIUM 62

The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not validate the file to be downloaded, allowing any authenticated users, such as subscr…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00409 Published 2022-12-19 Fixed in 1.0.5
Open these records in search →