Read the docs

WooThemes

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WooThemes records in CISA KEV

No WooThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Woocommerce Plugin · all components

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the range parameter on the wc-reports page to wp-admin/admi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02023 Published 2014-10-14 No fix listed CWE-79
Open these records in search →