Vendors / Multidots Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Multidots records in CISA KEV No Multidots vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce linked-variation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Linked Varia…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00326 · Published 2025-04-22 · No fix listed CWE-862
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin <= 3.7.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00248 · Published 2023-10-04 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin <= 2.4.0 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00256 · Published 2023-10-04 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00529 · Published 2018-05-31 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00529 · Published 2018-05-31 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0079 · Published 2018-06-01 · No fix listed CWE-79
Priority LOW 29
The MULTIDOTS WooCommerce Quick Reports plugin 1.0.6 and earlier for WordPress is vulnerable to Stored XSS.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00795 · Published 2018-06-01 · No fix listed CWE-79
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0022 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Fraud Prevention For Woocommerce plugin <= 2.1.5 versions.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0022 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0022 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 26
class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0093 · Published 2018-05-31 · No fix listed CWE-287
Priority LOW 25
An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00607 · Published 2018-05-31 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 9 0 0
THREATIST.IORead the docs