Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ghera74 Clear all filters
TI-2026-07571 CVE-2026-8615 · GHSA-8699-m8pv-8mxw

Missing authorization in ghera74 ilGhera Reviso Exporter for WooCommerce

Priority LOW 20

The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versio…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2026-09-09 No fix listed CWE-862
TI-2025-12823 CVE-2025-14033 · GHSA-2pg2-2j8p-rhqw

Authorization bypass in ghera74 ilGhera Support System for WooCommerce

Priority LOW 30

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_content_callback' function in all versions up to, and incl…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00256 Published 2026-05-13 No fix listed CWE-639
TI-2026-02054 CVE-2026-2421 · GHSA-m7m5-f625-9j3w

Path traversal in ghera74 ilGhera Carta Docente for WooCommerce

Priority LOW 29

The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of the 'wccd-delete-certificate' AJAX action.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00516 Published 2026-03-20 No fix listed CWE-22
TI-2025-12824 CVE-2025-14034 · GHSA-9677-rfqw-p4m4

Missing authorization in ghera74 ilGhera Support System for WooCommerce

Priority LOW 24

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'delete_single_ticket_callback' and 'change_ticket_stat…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0028 Published 2026-01-06 No fix listed CWE-862