Read the docs

wpclever

Records41All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

wpclever records in CISA KEV

No wpclever vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpc Smart Wishlist For Woocommerce 3 records MEDIUM Wpc Badge Management For Woocommerce 1 record LOW Wpc Frequently Bought Together For Woocommerce 1 record LOW Wpc Product Bundles For Woocommerce 1 record LOW Wpc Shop As A Customer For Woocommerce 1 record HIGH Wpc Smart Compare For Woocommerce 1 record LOW Wpc Smart Quick View For Woocommerce 1 record LOW

Records

3 records in Wpc Smart Wishlist For Woocommerce · all components

TI-2022-01339 CVE-2022-1465 · GHSA-576g-v6q3-g4rh

WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting

Priority LOW 29

The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00862 Published 2022-05-16 Fixed in 2.9.9 CWE-79
TI-2022-00322 CVE-2022-0397 · GHSA-43vw-pwr6-vmr7

WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting

Priority LOW 25

The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticat…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-03-28 Fixed in 2.9.4 CWE-79
Open these records in search →