Vulnerabilities

TI-2025-11866 CVE-2025-12955 · GHSA-5f3g-c8jf-rw88

Live sales notification for WooCommerce <= 2.3.39 - Missing Authorization to Unauthenticated Customer Data Exposure

LOW 39

The Live sales notification for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.3.39.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-11-18 No fix listed CWE-862

TI-2024-10534 CVE-2024-11369 · GHSA-xhm4-h45c-6x74

Store credit / Gift cards for woocommerce <= 1.0.49.46 - Reflected Cross-Site Scripting

LOW 27

The Store credit / Gift cards for woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'coupon', 'start_date', and 'end_date' parameters in all versions up to, and including, 1.0.49.46…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00378 Published 2025-01-07 No fix listed CWE-79

Vulnerabilities

Filters

Live sales notification for WooCommerce <= 2.3.39 - Missing Authorization to Unauthenticated Customer Data Exposure

Store credit / Gift cards for woocommerce <= 1.0.49.46 - Reflected Cross-Site Scripting