Vulnerabilities

TI-2022-02457 CVE-2022-2657 · GHSA-952v-66g2-63pm

Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls

LOW 20

The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00326 Published 2022-09-05 Fixed in 3.8.12 CWE-352

TI-2017-13765 CVE-2017-18592 · GHSA-c542-x9p8-v4wx

The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.

LOW 36

The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01377 Published 2019-08-27 No fix listed CWE-434

Vulnerabilities

Filters

Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX Calls

The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.