Vulnerabilities

TI-2024-17029 CVE-2024-25929 · GHSA-rr2g-6254-88hc

WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00319 Published 2024-06-09 No fix listed CWE-862

TI-2023-04921 CVE-2023-5348 · GHSA-v6cw-g4v9-gjmf

Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update

LOW 28

The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00531 Published 2023-12-18 Fixed in 5.0.3 CWE-79

Vulnerabilities

Filters

WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability

Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update