Read the docs

cedcommerce

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

cedcommerce records in CISA KEV

No cedcommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wholesale Market For Woocommerce 4 records HIGH Wholesale Market 2 records HIGH One Click Order Re-order 1 record LOW Recently Viewed And Most Viewed Products 1 record LOW Smsa Shipping For Woocommerce 1 record MEDIUM

Records

4 records in Wholesale Market For Woocommerce · all components

TI-2022-03754 CVE-2022-4106 · GHSA-6974-v8m9-mmj5

Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download

Priority HIGH 66

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00918 Published 2022-12-19 Fixed in 1.0.7 CWE-552
TI-2022-03996 CVE-2022-4363 · GHSA-fvhp-x5xr-47xv

Wholesale Market <= 2.2.2 - Settings Update via CSRF

Priority MEDIUM 62

The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in ad…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00196 Published 2025-05-16 Fixed in 2.2.2, 2.0.1 CWE-352
TI-2022-03756 CVE-2022-4108 · GHSA-fqpq-36q8-xc95

Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download

Priority MEDIUM 56

The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system path, allowing high privilege users such as admin to download arbitrary file from the server even wh…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00855 Published 2022-12-19 Fixed in 1.0.8
TI-2022-03757 CVE-2022-4109 · GHSA-qm6m-q7rm-4grf

Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download

Priority MEDIUM 47

The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users such as admin to download arbitrary logs from the server even…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00741 Published 2023-01-02 Fixed in 2.0.0
Open these records in search →