Vulnerabilities

TI-2024-08285 CVE-2024-8922 · GHSA-39q2-pcxp-5x58

Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php

MEDIUM 42

The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.33.32 via deserialization of untrusted input in enquir…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00804 Published 2024-09-27 No fix listed CWE-502

TI-2023-13601 CVE-2023-29170 · GHSA-mw45-5c3j-pmqf

WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-07 No fix listed CWE-79

Vulnerabilities

Filters

Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php

WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)