Read the docs

StoreApps

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

StoreApps records in CISA KEV

No StoreApps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Affiliate For Woocommerce 2 records MEDIUM News Announcement Scroll 2 records MEDIUM Stock Manager For Woocommerce 2 records LOW Smart Manager 1 record HIGH Temporary Login Without Password 1 record LOW

Records

1 record in Smart Manager · all components

TI-2024-00524 CVE-2024-0566 · GHSA-44pg-8763-mhc9

Smart Manager < 8.28.0 - Admin+ SQL Injection

Priority HIGH 67

The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03301 Published 2024-02-12 Fixed in 8.28.0 CWE-89
Open these records in search →