Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: cedcommerce Component: Wholesale Market Clear all filters
TI-2022-03996 CVE-2022-4363 · GHSA-fvhp-x5xr-47xv

Wholesale Market <= 2.2.2 - Settings Update via CSRF

Priority MEDIUM 62

The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in ad…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00196 Published 2025-05-16 Fixed in 2.2.2, 2.0.1 CWE-352
TI-2022-03936 CVE-2022-4298 · GHSA-r9x2-m498-v92q

Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download

Priority HIGH 82

The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file fr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01963 Published 2023-01-02 Fixed in 2.2.1