Read the docs

wclovers

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

wclovers records in CISA KEV

No wclovers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Frontend Manager For Woocommerce Along With Bookings Subscription Listings Compatible 6 records MEDIUM Wcfm Marketplace 4 records MEDIUM Wcfm Membership 4 records MEDIUM Woocommerce Multivendor Marketplace 1 record LOW

Records

1 record in Woocommerce Multivendor Marketplace · all components

TI-2023-02133 CVE-2023-2275 · GHSA-9x2h-m2w5-qq73

Missing authorization in wclovers WCFM – Multivendor Marketplace REST API for WooCommerce

Priority LOW 25

The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'get_item', 'get_order_notes' and 'add_or…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00466 Published 2023-06-09 No fix listed CWE-862
Open these records in search →