Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Addify Component: Role Based Pricing For Woocommerce Clear all filters
TI-2022-03257 CVE-2022-3537 · GHSA-wxff-8g4p-xj2g

Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload

Priority HIGH 73

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00657 Published 2022-11-07 Fixed in 1.6.2 CWE-352
TI-2022-03256 CVE-2022-3536 · GHSA-fch5-fx89-m666

Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization

Priority HIGH 73

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subsc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00674 Published 2022-11-07 Fixed in 1.6.3 CWE-352