Read the docs

wpdever

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

wpdever records in CISA KEV

No wpdever vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cart Tracking For Woocommerce 1 record LOW

Records

6 records

TI-2025-30035 CVE-2025-47538 · GHSA-gxxw-w6f5-mwh6

WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart track…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00487 Published 2025-05-07 No fix listed CWE-89
TI-2025-22061 CVE-2025-30791 · GHSA-g829-4gfh-rg4v

WordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart track…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00608 Published 2025-03-27 No fix listed CWE-89
TI-2025-16261 CVE-2025-22357 · GHSA-32x8-mv4r-c7xp

WordPress Target Notifications plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever Target Notifications target-notifications allows Reflected XSS.This issue affects Target Notifications: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-07 No fix listed CWE-79
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Priority LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79
TI-2025-36474 CVE-2025-58821 · GHSA-4p84-9c36-78c8

WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever WP Notification Bell wp-notification-bell allows Stored XSS.This issue affects WP Notification Bell: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00232 Published 2025-09-05 No fix listed CWE-79
Open these records in search →