Wc-marketplace

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wc-marketplace records in CISA KEV

No Wc-marketplace vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Multivendor Marketplace Solution For Woocommerce - Wc Marketplace 1 record LOW Wc Catalog Enquiry 1 record LOW

Records

2 records

TI-2017-13765 CVE-2017-18592 · GHSA-c542-x9p8-v4wx

The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.

LOW 36

The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01377 Published 2019-08-27 No fix listed CWE-434

TI-2022-02457 CVE-2022-2657 · GHSA-952v-66g2-63pm

Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls

LOW 20

The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00326 Published 2022-09-05 Fixed in 3.8.12 CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0