Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Vendor: All In One B2b For Woocommerce Project Clear all filters
TI-2023-04334 CVE-2023-4703 · GHSA-8wmq-h9m8-m384

All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation

Priority HIGH 68

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00687 Published 2024-01-16 No fix listed
TI-2023-03310 CVE-2023-3547 · GHSA-45j4-484p-rcm6

All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF

Priority HIGH 73

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00394 Published 2023-09-25 No fix listed