Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: ablancodev Clear all filters
TI-2025-36509 CVE-2025-58856 · GHSA-cc84-fvc8-g5h7

WordPress Woocommerce Notify Updated Product Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in ablancodev Woocommerce Notify Updated Product woocommerce-notify-updated-product allows Stored XSS.This issue affects Woocommerce Notify Updated Product: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00169 Published 2025-09-05 No fix listed CWE-352
TI-2025-23368 CVE-2025-32271 · GHSA-4m65-68v8-frj9

WordPress Woocommerce Role Pricing Plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in ablancodev Woocommerce Role Pricing woocommerce-role-pricing allows Cross Site Request Forgery.This issue affects Woocommerce Role Pricing: from n/a through <= 3.5.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00195 Published 2025-04-04 No fix listed CWE-352