Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: www.15.to Clear all filters
TI-2025-13365 CVE-2025-14626 · GHSA-6jrv-vjj6-mmf8

Cross-site scripting in www.15.to QR Code for WooCommerce order emails, PDF invoices…

Priority LOW 28

The QR Code for WooCommerce order emails, PDF invoices, packing slips plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.9.42 due to insuf…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0026 Published 2026-01-07 No fix listed CWE-79
TI-2025-23365 CVE-2025-32268 · GHSA-v9fr-mwf9-jjvx

WordPress QR Code Tag for WC plugin <= 1.9.42 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in www.15.to QR Code Tag for WC qr-code-tag-for-wc-from-goaskle-com allows Cross Site Request Forgery.This issue affects QR Code Tag for WC: from n/a through <= 1.9.42.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00195 Published 2025-04-04 No fix listed CWE-352