Read the docs

XforWooCommerce

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

XforWooCommerce records in CISA KEV

No XforWooCommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Add Product Tabs 1 record MEDIUM Autopilot Seo 1 record MEDIUM Bulk Add To Cart 1 record MEDIUM Comment And Review Spam Control 1 record MEDIUM Floating Cart 1 record MEDIUM Improved Product Options 1 record MEDIUM Improved Sale Badges 1 record MEDIUM Live Product Editor 1 record MEDIUM

Records

1 record in Live Product Editor · all components

TI-2021-03195 CVE-2021-4337 · GHSA-xf7w-7876-xwj4

Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization

Priority MEDIUM 43

Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wp_ajax_svx_ajax_factory function in various versions listed below.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01274 Published 2023-06-07 Fixed in 1.2.0, 1.3.0 +9 CWE-862
Open these records in search →