Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Coinmarketstats Clear all filters
TI-2022-03765 CVE-2022-4118 · GHSA-qrhc-83j2-vphf

Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi

Priority HIGH 76

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00898 Published 2023-05-08 No fix listed CWE-89
TI-2021-06961 CVE-2021-24679 · GHSA-hm5x-5qjj-jgqm

Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting

Priority LOW 29

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-10-04 Fixed in 1.6.1 CWE-79