Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: StoreApps Component: Stock Manager For Woocommerce Clear all filters
TI-2021-13633 CVE-2021-34619 · GHSA-mvp7-wp4v-3h3h

Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin

Priority LOW 39

The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocomm…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00719 Published 2021-07-21 No fix listed CWE-352