Read the docs

WPWeb

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

WPWeb records in CISA KEV

No WPWeb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Docket · all components

TI-2024-28803 CVE-2024-43132 · GHSA-j42w-vpmm-467m

SQL injection in WPWeb Docket

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) allows SQL Injection.This issue affects Docket (Wo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00534 Published 2024-08-29 Fixed in 1.7.0 CWE-89
TI-2024-28802 CVE-2024-43131 · GHSA-xqhm-wm3p-7wv9

Incorrect authorization in WPWeb Docket

Priority LOW 33

Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket (WooCommerce Collections /…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00485 Published 2024-08-13 Fixed in 1.7.0 CWE-863
Open these records in search →