Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 30

Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
Priority HIGH 74

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function in all vers…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34325 Published 2026-03-13 No fix listed CWE-434
Priority LOW 24

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all ver…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-01-27 No fix listed CWE-862
Priority LOW 30

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs() function in all version…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00316 Published 2026-01-16 No fix listed CWE-306
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in linknacional Invoice Payment for WooCommerce invoice-payment-for-woocommerce allows Reflected XSS.This issue affects I…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-12-13 No fix listed CWE-79