Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Josh Kohlbach Clear all filters
TI-2026-28482 CVE-2026-39508 · GHSA-mv96-qr2j-4hgg

WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows DOM-Based XSS.This…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00162 Published 2026-04-08 No fix listed CWE-79
TI-2026-24971 CVE-2026-32443 · GHSA-xg3w-r3f7-rx2p

WordPress Product Feed PRO for WooCommerce plugin <= 13.5.2 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in Josh Kohlbach Product Feed PRO for WooCommerce woo-product-feed-pro allows Cross Site Request Forgery.This issue affects Product Feed PRO for WooCommerce: from n/a throu…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00134 Published 2026-03-13 No fix listed CWE-352
TI-2026-24468 CVE-2026-31919 · GHSA-4hf3-6269-c3w3

WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-03-13 No fix listed CWE-862
TI-2025-37569 CVE-2025-60203 · GHSA-cwx8-hjhx-33h6

WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affect…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2025-11-06 No fix listed CWE-98
TI-2025-38338 CVE-2025-62015 · GHSA-8rvx-f5jr-g8mx

WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.6.8 - SQL Injection vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free.This issue affects Advanc…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0036 Published 2025-10-22 No fix listed CWE-89
TI-2025-31839 CVE-2025-49924 · GHSA-88hj-62w5-gmm2

WordPress Wholesale Suite plugin <= 2.2.4.2 - Privilege Escalation vulnerability

Priority LOW 34

Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.4.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00403 Published 2025-10-22 No fix listed CWE-266
TI-2025-23604 CVE-2025-32539 · GHSA-f73g-7q53-mm92

WordPress WooCommerce – Store Exporter plugin <= 2.7.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00435 Published 2025-04-11 No fix listed CWE-79
TI-2024-33948 CVE-2024-50519 · GHSA-qmxp-r8m7-qpxp

WordPress Jigoshop – Store Exporter plugin <= 1.5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Jigoshop – Store Exporter jigoshop-exporter allows Reflected XSS.This issue affects Jigoshop – Store Exp…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-11-19 No fix listed CWE-79