dcurasi

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

dcurasi records in CISA KEV

No dcurasi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cc & Bcc For Woocommerce Order Emails 1 record LOW Cookie Notice Bar 1 record LOW

Records

2 records

TI-2024-25026 CVE-2024-37522 · GHSA-54h9-mq6x-g6rj

WordPress CC & BCC for Woocommerce Order Emails plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dario Curasì CC & BCC for Woocommerce Order Emails allows Stored XSS.This issue affects CC & BCC for Woocommerc…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-07-21 No fix listed CWE-79

TI-2024-12870 CVE-2024-13849 · GHSA-2cxg-wgm8-g86m

Cookie Notice Bar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 25

The Cookie Notice Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00308 Published 2025-02-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0