Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: wpclever Component: Wpc Smart Wishlist For Woocommerce Clear all filters
TI-2022-01339 CVE-2022-1465 · GHSA-576g-v6q3-g4rh

WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting

Priority LOW 29

The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00862 Published 2022-05-16 Fixed in 2.9.9 CWE-79
TI-2022-00322 CVE-2022-0397 · GHSA-43vw-pwr6-vmr7

WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting

Priority LOW 25

The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticat…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-03-28 Fixed in 2.9.4 CWE-79