Read the docs

WebToffee

Records69All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

WebToffee records in CISA KEV

No WebToffee vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Import Export Wordpress Users 8 records MEDIUM Product Import Export For Woocommerce 6 records MEDIUM Woocommerce Pdf Invoices, Packing Slips, Delivery Notes And Shipping Labels 6 records LOW Order Export & Order Import For Woocommerce 5 records LOW Backup And Migration 3 records LOW Stripe Payment Plugin For Woocommerce 3 records MEDIUM Gdpr Cookie Consent 2 records MEDIUM Wordpress Comments Import And Export 2 records MEDIUM

Records

3 records in Stripe Payment Plugin For Woocommerce · all components

TI-2024-00649 CVE-2024-0705 · GHSA-5jv7-xqc8-wq28

Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

Priority MEDIUM 53

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02635 Published 2024-01-19 No fix listed CWE-89
TI-2023-03748 CVE-2023-4040 · GHSA-6879-vfm4-hv3x

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to…

Priority LOW 30

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to, and including, 3.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00459 Published 2023-08-18 No fix listed
Open these records in search →