Vendors / theDotstore Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now theDotstore records in CISA KEV No theDotstore vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 65
The Conditional Payment Methods for WooCommerce WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by [high privilege…
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00955 · Published 2023-01-16 · No fix listed CWE-89
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin <= 3.7.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00248 · Published 2023-10-04 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin <= 2.4.0 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00256 · Published 2023-10-04 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0022 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Fraud Prevention For Woocommerce plugin <= 2.1.5 versions.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0022 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0022 · Published 2023-10-03 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 3 3 0 0
THREATIST.IORead the docs