OPMC

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

OPMC records in CISA KEV

No OPMC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Dropshipping 2 records HIGH

Records

2 records in Woocommerce Dropshipping · all components

TI-2022-03213 CVE-2022-3481 · GHSA-m4wm-6gf3-2xqw

WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

HIGH 82

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05296 Published 2022-11-07 Fixed in 4.4 CWE-89

TI-2024-23617 CVE-2024-35748 · GHSA-w6j7-7mmx-4w74

WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability

LOW 24

Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-09 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0