Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: codisto Clear all filters
TI-2025-41650 CVE-2025-68041 · GHSA-vg59-g4j9-2q98

WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: f…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-01-22 No fix listed CWE-79
TI-2025-10752 CVE-2025-11727 · GHSA-wrqp-2jf5-h35r

Cross-site scripting in codisto Omnichannel for WooCommerce: Google, Amazon, eBay &…

Priority LOW 37

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync() function in all versions up to, and includ…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00307 Published 2025-12-04 No fix listed CWE-79