Read the docs

Collect And Deliver Interface For Woocommerce Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Collect And Deliver Interface For Woocommerce Project records in CISA KEV

No Collect And Deliver Interface For Woocommerce Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 31

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflect…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01702 Published 2022-07-17 Fixed in 5.1.9 CWE-79
Open these records in search →