Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: delabon Clear all filters
TI-2025-12009 CVE-2025-13137 · GHSA-x873-95jg-qqh2

Live Sales Notification for Woocommerce – Woomotiv <= 3.6.3 - Reflected Cross-Site Scripting

Priority LOW 27

The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'woomotiv_limit' parameter in all versions up to, and including, 3.6.3 due to insufficie…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0022 Published 2025-12-06 No fix listed CWE-79
TI-2024-11520 CVE-2024-12416 · GHSA-6c2v-f643-gwhv

Woomotiv <= 3.6.1 - Unauthenticated SQL Injection

Priority LOW 39

The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escapi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00468 Published 2025-01-07 No fix listed CWE-89