Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: PersianScript Clear all filters
TI-2026-17934 CVE-2026-22352 · GHSA-76g3-wv5g-g883

WordPress Persian Woocommerce SMS plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocomme…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2026-02-20 No fix listed CWE-79
TI-2025-31363 CVE-2025-49315 · GHSA-m535-wcvm-rcf9

WordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection Vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows SQL Injection.This issue affects Persian Woocomme…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00435 Published 2025-06-06 No fix listed CWE-89
TI-2024-36400 CVE-2024-54312 · GHSA-9vp7-2w9w-9982

Cross-site scripting in PersianScript Persian Woocommerce SMS

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocomme…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79
TI-2024-09322 CVE-2024-10046 · GHSA-mwm6-xrf2-mp9x

افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting

Priority LOW 27

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00364 Published 2024-12-07 No fix listed CWE-79
TI-2024-08549 CVE-2024-9213 · GHSA-rf5g-w3gw-grcm

Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting

Priority LOW 27

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2024-10-17 No fix listed CWE-79