Read the docs

shoheitanaka

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

shoheitanaka records in CISA KEV

No shoheitanaka vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2023-25835 CVE-2023-47698 · GHSA-p34g-pvrv-g554

WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability

Priority MEDIUM 44

Missing Authorization vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Japanized For WooCommerce: f…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00422 Published 2024-12-09 No fix listed CWE-862
TI-2025-13577 CVE-2025-14886 · GHSA-c5g8-rjq4-799p

Japanized for WooCommerce <= 2.7.17 - Missing Authorization to Unauthenticated Order Status Modification

Priority LOW 30

The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `order` REST API endpoint in all versions up to, and including, 2.7.17.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00262 Published 2026-01-09 No fix listed CWE-862
TI-2025-30610 CVE-2025-48284 · GHSA-w3pg-gj6v-vr2v

WordPress Japanized For WooCommerce plugin <= 2.6.40 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Cross Site Request Forgery.This issue affects Japanized For WooCommerce: from n/a through <= 2.6.40.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00147 Published 2025-05-19 No fix listed CWE-352
Open these records in search →