Vulnerabilities

TI-2025-26305 CVE-2025-39563 · GHSA-ghq9-g65f-2r4v

WordPress Conditional Payments for WooCommerce plugin <= 3.3.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommer…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00257 Published 2025-04-16 No fix listed CWE-352

TI-2025-26306 CVE-2025-39564 · GHSA-rgv7-v2jh-pv8v

WordPress Conditional Shipping for WooCommerce plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 28

Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Shipping for WooCommerce conditional-shipping-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Shipping for WooCommer…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00257 Published 2025-04-16 No fix listed CWE-352

TI-2022-23153 CVE-2022-46807 · GHSA-3p5p-c5mc-jqg3

WordPress Stock Sync for WooCommerce plugin <= 2.3.2 - Broken Access Control

LOW 21

Missing Authorization vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Sync for WooCommerce: from n/a t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00526 Published 2024-12-13 No fix listed CWE-862

TI-2023-14820 CVE-2023-31094 · GHSA-2758-47r7-2729

WordPress Stock Sync for WooCommerce Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <= 2.4.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-18 No fix listed CWE-79

TI-2022-23151 CVE-2022-46805 · GHSA-j678-qc3p-928v

WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 leading to activation/deactivation of plugin rulesets.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00215 Published 2023-03-01 No fix listed CWE-352

TI-2022-23161 CVE-2022-46815 · GHSA-27jr-vp8c-qhvq

WordPress Conditional Shipping for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2023-02-02 No fix listed CWE-352