StoreApps

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

StoreApps records in CISA KEV

No StoreApps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate For Woocommerce 2 records MEDIUM News Announcement Scroll 2 records MEDIUM Stock Manager For Woocommerce 2 records LOW Smart Manager 1 record HIGH Temporary Login Without Password 1 record LOW

Records

2 records in Stock Manager For Woocommerce · all components

TI-2021-13633 CVE-2021-34619 · GHSA-mvp7-wp4v-3h3h

Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin

LOW 39

The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocomm…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00719 Published 2021-07-21 No fix listed CWE-352

TI-2023-17561 CVE-2023-35091 · GHSA-98fp-r2g8-pgg9

WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in StoreApps Stock Manager for WooCommerce plugin <= 2.10.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-07-11 No fix listed CWE-352

Open these records in search →

Critical	0
High	9
Medium	5
Low	0
No CVSS	0