Vulnerabilities

TI-2025-36635 CVE-2025-58991 · GHSA-36m6-3822-4m7c

WordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00113 Published 2025-09-09 No fix listed CWE-352

TI-2025-22107 CVE-2025-30837 · GHSA-c2pm-jwhm-8xmf

WordPress WooCommerce Fattureincloud plugin <= 2.6.7 - Cross Site Scripting (XSS) vulnerability

LOW 33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristiano Zanca WooCommerce Fattureincloud woo-fattureincloud allows Reflected XSS.This issue affects WooCommerce Fatt…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00317 Published 2025-04-01 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress WooCommerce Fattureincloud plugin <= 2.6.7 - Cross Site Scripting (XSS) vulnerability