Read the docs

Rymera Web Co

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Rymera Web Co records in CISA KEV

No Rymera Web Co vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wholesale Suite 2 records LOW Advanced Coupons 1 record LOW Auto Refresh Single Page 1 record MEDIUM

Records

9 records

TI-2024-01610 CVE-2024-1731 · GHSA-hjp2-wg69-g55x

Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 42

The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1 via deserialization of untrusted input from the arsp_options post meta option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00851 Published 2024-03-05 No fix listed CWE-502
TI-2022-15248 CVE-2022-34344 · GHSA-69wm-cjpw-r4qm

WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Broken Access Control

Priority LOW 38

Missing Authorization vulnerability in Rymera Web Co Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More.This issue affects Wholesale Suite – WooCom…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0046 Published 2024-01-08 No fix listed CWE-862
TI-2026-67835 CVE-2026-103349 · GHSA-mchg-wqjh-wq83

PHP object injection in Product Feed PRO for WooCommerce plugin

Priority LOW 34

Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Object Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.7.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00385 Published 2026-10-05 No fix listed CWE-502
Open these records in search →