Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WPFactory Component: Eu/uk Vat Manager For Woocommerce Clear all filters
TI-2024-29650 CVE-2024-44061 · GHSA-w4xx-xxh4-422c

WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerc…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-10-20 No fix listed CWE-79
TI-2024-08527 CVE-2024-9189 · GHSA-r58j-wf5c-jr5h

EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization

Priority LOW 31

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function in all versions up to,…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00476 Published 2024-09-28 No fix listed CWE-862
TI-2024-08154 CVE-2024-8788 · GHSA-q76r-wfxf-2r8x

EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting

Priority LOW 28

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.1…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00433 Published 2024-09-28 No fix listed CWE-79