Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Anzar Ahmed Clear all filters
TI-2025-23323 CVE-2025-32226 · GHSA-j95j-frq6-6x8g

WordPress Display product variations dropdown on shop page plugin <= 1.1.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00438 Published 2025-04-04 No fix listed CWE-862
TI-2025-23304 CVE-2025-32207 · GHSA-2936-3xwv-v4fj

WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooComme…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79
TI-2025-22743 CVE-2025-31580 · GHSA-7w5j-39rx-j497

WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry ni-woocommerce-product-enquiry allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ni WooCommerce Product E…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-04-01 No fix listed CWE-862
TI-2025-22963 CVE-2025-31826 · GHSA-79p3-p2hc-84mg

WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0046 Published 2025-04-01 No fix listed CWE-862
TI-2025-17248 CVE-2025-23481 · GHSA-x637-7g3v-9gfj

WordPress Ni WooCommerce Sales Report Email plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Sales Report Email ni-woocommerce-sales-report-email allows Reflected XSS.This issue affect…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00281 Published 2025-03-03 No fix listed CWE-79
TI-2024-36347 CVE-2024-54258 · GHSA-c4pr-cjx5-2mh2

WordPress Ni CRM Lead plugin <= 1.3.0 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni CRM Lead ni-crm-lead allows SQL Injection.This issue affects Ni CRM Lead: from n/a through <= 1.3.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00504 Published 2024-12-13 No fix listed CWE-89
TI-2024-36325 CVE-2024-54236 · GHSA-f22v-ffw2-qx8g

WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects N…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79
TI-2024-36320 CVE-2024-54231 · GHSA-g8w8-65mq-pgmc

WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Order Export ni-woocommerce-order-export allows Reflected XSS.This issue affects Ni WooComm…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79
TI-2023-15595 CVE-2023-32299 · GHSA-vh4v-g9hc-rcvv

WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Sales Report ni-woocommerce-sales-report allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Sales R…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00531 Published 2024-12-09 No fix listed CWE-862
TI-2024-35981 CVE-2024-53783 · GHSA-j46m-wrfx-rcw9

WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods.This issue affects Ni WooCommerce Cost Of Goods:…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00486 Published 2024-11-30 No fix listed CWE-89