WPWeb

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

WPWeb records in CISA KEV

No WPWeb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Social Login 9 records MEDIUM Woocommerce Pdf Vouchers 5 records MEDIUM Docket 2 records MEDIUM Follow My Blog Post 2 records LOW

Records

5 records in Woocommerce Pdf Vouchers · all components

TI-2024-36469 CVE-2024-54383 · GHSA-j57c-vpq3-6x56

WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability

MEDIUM 51

Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through < 4.9.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01167 Published 2024-12-18 No fix listed CWE-266

TI-2024-26574 CVE-2024-39650 · GHSA-68hh-g5c3-pjg2

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities

MEDIUM 48

Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00454 Published 2024-11-01 No fix listed CWE-862

TI-2024-26575 CVE-2024-39651 · GHSA-jfcj-w3xj-hw99

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability

MEDIUM 47

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00496 Published 2024-08-13 Fixed in 4.9.5 CWE-22

TI-2024-37235 CVE-2024-56265 · GHSA-9h55-3q8w-9x37

WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouche…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00289 Published 2024-12-31 No fix listed CWE-79

TI-2024-26576 CVE-2024-39652 · GHSA-4p5p-hc8f-q6m8

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-01 Fixed in 4.9.5 CWE-79

Open these records in search →

Critical	8
High	16
Medium	5
Low	0
No CVSS	0