Read the docs

PersianScript

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

PersianScript records in CISA KEV

No PersianScript vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-31363 CVE-2025-49315 · GHSA-m535-wcvm-rcf9

WordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection Vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows SQL Injection.This issue affects Persian Woocomme…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00435 Published 2025-06-06 No fix listed CWE-89
TI-2024-36400 CVE-2024-54312 · GHSA-9vp7-2w9w-9982

Cross-site scripting in PersianScript Persian Woocommerce SMS

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocomme…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79
TI-2026-17934 CVE-2026-22352 · GHSA-76g3-wv5g-g883

WordPress Persian Woocommerce SMS plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocomme…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2026-02-20 No fix listed CWE-79
TI-2024-09322 CVE-2024-10046 · GHSA-mwm6-xrf2-mp9x

افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting

Priority LOW 27

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00364 Published 2024-12-07 No fix listed CWE-79
TI-2024-08549 CVE-2024-9213 · GHSA-rf5g-w3gw-grcm

Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting

Priority LOW 27

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2024-10-17 No fix listed CWE-79
Open these records in search →