Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: marcoingraiti Clear all filters
TI-2025-31398 CVE-2025-49350 · GHSA-877j-jv88-962g

WordPress Actionwear products sync plugin <= 2.3.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync:…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00375 Published 2025-12-09 No fix listed CWE-862
TI-2025-22782 CVE-2025-31619 · GHSA-869p-365f-xwr8

WordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear pro…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00471 Published 2025-04-01 No fix listed CWE-89