Vulnerabilities

TI-2023-28147 CVE-2023-51495 · GHSA-cmm9-g859-437v

WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00355 Published 2024-06-14 No fix listed CWE-862

TI-2023-28148 CVE-2023-51496 · GHSA-f2g5-gjh6-fcvg

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-14 No fix listed CWE-862

TI-2023-16476 CVE-2023-33317 · GHSA-hm8r-2wq3-2prq

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-30 No fix listed CWE-79