Vulnerabilities

TI-2023-27755 CVE-2023-50850 · GHSA-vj29-vrh9-6589

WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a before 5.8.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00377 Published 2024-12-31 Fixed in 5.8.0 CWE-862

TI-2017-14259 CVE-2017-20193 · GHSA-whqq-5qx6-vwwf

Product Vendors <= 2.0.35 - Reflected Cross Site Scripting

LOW 27

The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00417 Published 2024-10-16 Fixed in 2.0.36 CWE-79

TI-2023-19311 CVE-2023-37872 · GHSA-vq29-m49g-76x9

WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.5 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00494 Published 2024-06-19 No fix listed CWE-862

TI-2023-18351 CVE-2023-36512 · GHSA-mxhm-55rx-j7v5

WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00386 Published 2024-06-19 No fix listed CWE-862

TI-2023-19309 CVE-2023-37870 · GHSA-7228-8qfm-pv8c

WordPress WooCommerce Warranty Requests plugin <= 2.1.9 - Broken Access Control vulnerability

HIGH 70

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00435 Published 2024-06-19 No fix listed CWE-862

TI-2023-28147 CVE-2023-51495 · GHSA-cmm9-g859-437v

WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00355 Published 2024-06-14 No fix listed CWE-862

TI-2023-28148 CVE-2023-51496 · GHSA-f2g5-gjh6-fcvg

WordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-14 No fix listed CWE-862

TI-2023-28149 CVE-2023-51497 · GHSA-f45m-62gh-jw4q

WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00314 Published 2024-06-14 No fix listed CWE-862

TI-2023-28150 CVE-2023-51498 · GHSA-9h54-f8p4-357g

WordPress WooCommerce Canada Post Shipping plugin <= 2.8.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2024-06-11 No fix listed CWE-862

TI-2023-28614 CVE-2023-52186 · GHSA-86xr-hhp2-92cj

WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2024-06-11 No fix listed CWE-862

TI-2023-16870 CVE-2023-34003 · GHSA-789r-f888-xv3f

WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability

LOW 35

Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00348 Published 2024-06-09 No fix listed CWE-862

TI-2023-28146 CVE-2023-51494 · GHSA-c9vr-xfgm-jgh2

WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00365 Published 2024-06-09 No fix listed CWE-862

TI-2023-16490 CVE-2023-33331 · GHSA-368x-vqh8-wg8x

WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00929 Published 2023-12-18 No fix listed CWE-89

TI-2023-17950 CVE-2023-35879 · GHSA-qgfp-cppw-mc67

WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection

MEDIUM 50

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00732 Published 2023-10-31 No fix listed CWE-89

Vulnerabilities

Filters