Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: wooassist Clear all filters
TI-2024-02564 CVE-2024-2752 · GHSA-rvjp-mhp8-5xmw

Cross-site scripting in wooassist Where Did You Hear About Us Checkout Field for…

Priority LOW 25

The Where Did You Hear About Us Checkout Field for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via order meta in all versions up to, and including, 1.3.1 due to insufficient input saniti…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00419 Published 2024-05-02 No fix listed CWE-79
TI-2021-06890 CVE-2021-24607 · GHSA-6mwr-q2wv-5p29

Storefront Footer Text <= 1.0.1 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-11-08 No fix listed CWE-79