Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: WPWeb Component: Woocommerce Pdf Vouchers Clear all filters
TI-2024-37235 CVE-2024-56265 · GHSA-9h55-3q8w-9x37

WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouche…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00289 Published 2024-12-31 No fix listed CWE-79
TI-2024-26575 CVE-2024-39651 · GHSA-jfcj-w3xj-hw99

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability

Priority MEDIUM 47

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00496 Published 2024-08-13 Fixed in 4.9.5 CWE-22
TI-2024-26576 CVE-2024-39652 · GHSA-4p5p-hc8f-q6m8

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-01 Fixed in 4.9.5 CWE-79