Read the docs

Mestres do WP

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Mestres do WP records in CISA KEV

No Mestres do WP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority MEDIUM 50

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() functi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00734 Published 2025-03-29 No fix listed CWE-862
Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00566 Published 2023-12-31 No fix listed CWE-89
Priority LOW 33

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP:…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00644 Published 2024-10-02 No fix listed CWE-22
Open these records in search →