Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: technocrackers Clear all filters
TI-2024-01966 CVE-2024-2116 · GHSA-pxq6-w56g-vh78

Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting

Priority LOW 28

The Christmas Greetings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the code parameter in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00493 Published 2024-03-29 No fix listed CWE-79
TI-2023-13183 CVE-2023-28665 · GHSA-2ggg-rwwg-7wg9

Cross-site scripting in Woo Bulk Price Update WordPress Plugin

Priority MEDIUM 58

The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_get_products action, which can only be triggered by an…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00887 Published 2023-03-22 Fixed in 2.2.2 CWE-79