StoreApps

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

StoreApps records in CISA KEV

No StoreApps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate For Woocommerce 2 records MEDIUM News Announcement Scroll 2 records MEDIUM Stock Manager For Woocommerce 2 records LOW Smart Manager 1 record HIGH Temporary Login Without Password 1 record LOW

Records

2 records in Affiliate For Woocommerce · all components

TI-2022-09233 CVE-2022-25649 · GHSA-cf9j-7x8p-4gvv

WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities

MEDIUM 40

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00908 Published 2022-08-05 No fix listed CWE-264

TI-2022-16640 CVE-2022-36284 · GHSA-f8cv-rhqg-3x6w

Authorization bypass in StoreApps Affiliate For WooCommerce

LOW 30

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00651 Published 2022-08-05 No fix listed CWE-639

Open these records in search →

Critical	0
High	9
Medium	5
Low	0
No CVSS	0