Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
MingoCommerce records in CISA KEVNo MingoCommerce vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00384 · Published 2025-04-17 · No fix listed CWE-862
Priority LOW 31
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in MingoCommerce WooCommerce Product Enquiry plugin <= 2.3.4 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00403 · Published 2023-11-16 · No fix listed CWE-79
