Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: anzia Clear all filters
TI-2026-03589 CVE-2026-4140 · GHSA-p2vp-x377-3m3c

Cross-site request forgery in anzia Ni WooCommerce Order Export

Priority LOW 19

The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00156 Published 2026-04-22 No fix listed CWE-352
TI-2025-07151 CVE-2025-7827 · GHSA-xgw9-335v-h35w

Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Priority LOW 19

The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ni_woocpr_action() function in all versions up to, and including…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-08-23 No fix listed CWE-862
TI-2024-12465 CVE-2024-13424 · GHSA-m92p-xxm4-35x6

Ni Sales Commission For WooCommerce <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Commission Update

Priority LOW 20

The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwoosc_ajax' AJAX endpoint in all versions up to, and including, 1.2.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00246 Published 2025-01-31 No fix listed CWE-862