Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: ProWCPlugins Clear all filters
TI-2026-28631 CVE-2026-39662 · GHSA-733v-h7xg-5975

WordPress Product Price by Formula for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in ProWCPlugins Product Price by Formula for WooCommerce product-price-by-formula-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862
TI-2025-35761 CVE-2025-57908 · GHSA-2h75-8m87-96fc

WordPress Product Time Countdown for WooCommerce plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue aff…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00296 Published 2025-09-22 No fix listed CWE-79
TI-2025-31958 CVE-2025-50045 · GHSA-gv66-9cgc-hh4h

WordPress Related Products Manager for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Related Products Manager for WooCommerce related-products-manager-woocommerce allows DOM-Based XSS.This i…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-20 No fix listed CWE-79
TI-2025-30002 CVE-2025-47505 · GHSA-8338-wqxp-w83r

WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue aff…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00266 Published 2025-05-07 No fix listed CWE-79
TI-2024-24732 CVE-2024-37217 · GHSA-j8fv-wp2q-77qv

WordPress Empty Cart Button for WooCommerce plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ProWCPlugins Empty Cart Button for WooCommerce allows Stored XSS.This issue affects Empty Cart Button for WooCo…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79