Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 50

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() functi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00734 Published 2025-03-29 No fix listed CWE-862
Priority LOW 33

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP:…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00644 Published 2024-10-02 No fix listed CWE-22
Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00566 Published 2023-12-31 No fix listed CWE-89