Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: prodigycommerce Clear all filters
TI-2024-36339 CVE-2024-54250 · GHSA-4m49-wchq-72x6

WordPress Prodigy Commerce plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows DOM-Based XSS.This issue affects Prodigy Commerce: from n/a t…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00408 Published 2024-12-13 No fix listed CWE-79
TI-2024-36340 CVE-2024-54251 · GHSA-9wjp-m7pw-vf4c

WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through <= 3.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00487 Published 2024-12-09 No fix listed CWE-862