Read the docs

wooassist

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wooassist records in CISA KEV

No wooassist vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Storefront Footer Text 1 record LOW

Records

2 records

TI-2024-02564 CVE-2024-2752 · GHSA-rvjp-mhp8-5xmw

Cross-site scripting in wooassist Where Did You Hear About Us Checkout Field for…

Priority LOW 25

The Where Did You Hear About Us Checkout Field for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via order meta in all versions up to, and including, 1.3.1 due to insufficient input saniti…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00419 Published 2024-05-02 No fix listed CWE-79
TI-2021-06890 CVE-2021-24607 · GHSA-6mwr-q2wv-5p29

Storefront Footer Text <= 1.0.1 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-11-08 No fix listed CWE-79
Open these records in search →