Read the docs

Doofinder

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Doofinder records in CISA KEV

No Doofinder vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Doofinder 4 records LOW

Records

4 records in Doofinder · all components

TI-2023-26844 CVE-2023-49185 · GHSA-2cj2-3g3v-rx62

WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2023-12-15 No fix listed CWE-79
TI-2024-16824 CVE-2024-25596 · GHSA-4q5v-9h2g-q5rg

WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-03-15 No fix listed CWE-79
Open these records in search →