Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Dpdgroup Clear all filters
TI-2022-03669 CVE-2022-4000 · GHSA-gvfx-jhx9-4mvq

WooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS

Priority MEDIUM 55

The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-12 No fix listed
TI-2022-03668 CVE-2022-3999 · GHSA-7rm4-78m3-r89p

WooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options Deletion

Priority HIGH 68

The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated users, such as subscriber to delete arbitrary options from the blog, whic…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00445 Published 2022-12-12 Fixed in 1.2.57 CWE-352