Vulnerabilities

TI-2023-21364 CVE-2023-40559 · GHSA-5r4h-96j4-r5ff

Cross-site request forgery in theDotstore Dynamic Pricing and Discount Rules for…

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin <= 2.4.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-10-04 No fix listed CWE-352

TI-2023-21366 CVE-2023-40561 · GHSA-6jjg-6h8c-q23q

Cross-site request forgery in theDotstore Enhanced Ecommerce Google Analytics for…

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin <= 3.7.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-10-04 No fix listed CWE-352

TI-2023-20325 CVE-2023-39158 · GHSA-x92w-q828-3gcm

WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0022 Published 2023-10-03 No fix listed CWE-352

TI-2023-20326 CVE-2023-39159 · GHSA-pvg7-jvhx-fv6q

WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Fraud Prevention For Woocommerce plugin <= 2.1.5 versions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0022 Published 2023-10-03 No fix listed CWE-352

TI-2023-21082 CVE-2023-40212 · GHSA-34h4-6895-w557

WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0022 Published 2023-10-03 No fix listed CWE-352

TI-2022-04151 CVE-2022-4547 · GHSA-fxp5-2pjw-x9j4

Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi

HIGH 65

The Conditional Payment Methods for WooCommerce WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by [high privilege…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00955 Published 2023-01-16 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site request forgery in theDotstore Dynamic Pricing and Discount Rules for…

Cross-site request forgery in theDotstore Enhanced Ecommerce Google Analytics for…

WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi