Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Adtribes Clear all filters
TI-2024-21164 CVE-2024-32087 · GHSA-v38h-vr3h-38m7

SQL injection in ExportFeed.com Product Feed on WooCommerce for Google

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Product Feed on WooCommerce for Google.This issue affects Product Feed on WooCommerce for Google: from…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00574 Published 2024-04-15 No fix listed CWE-89
TI-2022-00350 CVE-2022-0426 · GHSA-g8vp-6g67-pf46

Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting

Priority LOW 25

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the woosea_categories_dropdown AJAX action (available to any authen…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00649 Published 2022-03-07 Fixed in 11.2.3 CWE-79
TI-2021-07253 CVE-2021-24974 · GHSA-x3mr-p889-7f32

Product Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS

Priority LOW 25

The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00607 Published 2022-01-24 Fixed in 11.0.7 CWE-79