Vulnerabilities

TI-2021-07355 CVE-2021-25077 · GHSA-56vv-w8x4-c263

Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting

LOW 29

The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00876 Published 2022-02-07 Fixed in 2.3.2 CWE-79

TI-2016-08961 CVE-2016-10923 · GHSA-x9jg-j687-3gvm

The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.

MEDIUM 46

The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02076 Published 2019-08-22 No fix listed CWE-264

TI-2016-08960 CVE-2016-10922 · GHSA-f9jm-w7j3-69jp

The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.

MEDIUM 46

The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02099 Published 2019-08-22 No fix listed CWE-264

Vulnerabilities

Filters

Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting

The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.

The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.