Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: BinaryCarpenter Clear all filters
TI-2025-30660 CVE-2025-48334 · GHSA-xmqw-mq56-x22h

WordPress Woo Slider Pro <= 1.12 - Arbitrary Content Deletion Vulnerability

Priority LOW 28

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00255 Published 2025-05-30 No fix listed CWE-862
TI-2025-22895 CVE-2025-31758 · GHSA-j5p8-8v4q-rp6p

WordPress Free Woocommerce Product Table View plugin <= 1.78 - Arbitrary Content Deletion vulnerability

Priority LOW 29

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fre…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00429 Published 2025-04-03 No fix listed CWE-862
TI-2025-22894 CVE-2025-31757 · GHSA-vxrm-x722-93pv

WordPress Free Woocommerce Product Table View plugin <= 1.78 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fre…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00455 Published 2025-04-01 No fix listed CWE-862
TI-2024-37013 CVE-2024-55977 · GHSA-c827-f4c9-92x2

WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BinaryCarpenter LaunchPage.app Importer launchpage-app-importer allows SQL Injection.This issue affects LaunchPage.app…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00538 Published 2024-12-16 No fix listed CWE-89
TI-2024-24717 CVE-2024-37202 · GHSA-xjjh-w5wh-cgwv

Missing authorization in BinaryCarpenter Ultimate Custom Add To Cart Button For…

Priority LOW 28

Missing Authorization vulnerability in BinaryCarpenter Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter custom-add-to-cart-button-for-woocommerce.This issue affects Ultimate Custom Add To Car…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0024 Published 2024-07-12 No fix listed CWE-862
TI-2023-27259 CVE-2023-49855 · GHSA-78xh-7fwh-vxxr

Cross-site request forgery in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By…

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2023-12-18 No fix listed CWE-352