Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: GSheetConnector Component: Woocommerce Google Sheet Connector Clear all filters
TI-2024-01458 CVE-2024-1562 · GHSA-wqjf-rx4g-qxmr

WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization

Priority LOW 30

The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the execute_post_data function in all versions up to, and including, 1.3…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00428 Published 2024-02-21 No fix listed CWE-862
TI-2023-02185 CVE-2023-2329 · GHSA-q27x-qpp2-53pw

WooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRF

Priority HIGH 73

The WooCommerce Google Sheet Connector WordPress plugin before 1.3.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00389 Published 2023-07-17 Fixed in 1.3.6