Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Varktech Clear all filters
TI-2023-21849 CVE-2023-41240 · GHSA-jrv5-734x-jwfc

Missing authorization in Vark Pricing Deals for WooCommerce

Priority LOW 30

Missing Authorization vulnerability in Vark Pricing Deals for WooCommerce.This issue affects Pricing Deals for WooCommerce: from n/a through 2.0.3.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00351 Published 2024-06-12 No fix listed CWE-862
TI-2022-00954 CVE-2022-1057 · GHSA-x469-5gjm-mqfr

Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi

Priority MEDIUM 53

The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08013 Published 2022-07-11 No fix listed CWE-89