shipdeoplugin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

shipdeoplugin records in CISA KEV

No shipdeoplugin vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-17224 CVE-2025-23457 · GHSA-qvv2-vrvp-prm4

WordPress Shipdeo plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shipdeoplugin Shipdeo shipdeo-woo allows Reflected XSS.This issue affects Shipdeo: from n/a through <= 1.2.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00238 Published 2025-01-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0