Variation Swatches For Woocommerce Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Variation Swatches For Woocommerce Project records in CISA KEV

No Variation Swatches For Woocommerce Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Variation Swatches For Woocommerce 3 records LOW

Records

3 records

TI-2023-19407 CVE-2023-37975 · GHSA-cr6g-cqq5-j93j

WordPress Variation Swatches for WooCommerce Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Swatches for WooCommerce plugin <= 2.3.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-07-27 No fix listed CWE-79

TI-2021-18782 CVE-2021-42367 · GHSA-6ffh-2qg3-m72q

Variation Swatches for WooCommerce <= 2.1.1 Authenticated Stored Cross-Site Scripting

LOW 29

The Variation Swatches for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via several parameters found in the ~/includes/class-menu-page.php file which allows attackers to inject arbitrary web…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00549 Published 2021-12-14 No fix listed CWE-79

TI-2024-12552 CVE-2024-13511 · GHSA-fh2m-hcqj-m6hp

Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset

LOW 19

The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00196 Published 2025-01-23 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0