wp3sixty

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

wp3sixty records in CISA KEV

No wp3sixty vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woo Custom Emails 2 records LOW

Records

2 records in Woo Custom Emails · all components

TI-2023-24065 CVE-2023-45004 · GHSA-f3v7-7g27-82qw

WordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wp3sixty Woo Custom Emails plugin <= 2.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00353 Published 2023-10-17 No fix listed CWE-79

TI-2023-03987 CVE-2023-4315 · GHSA-38fm-hvrq-g6g6

Woo Custom Emails <= 2.2 - Reflected Cross-Site Scripting via wcemails_edit

LOW 28

The Woo Custom Emails for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wcemails_edit' parameter in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00446 Published 2023-08-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0