CVE-2021-4337

🗓️ 07 Jun 2023 12:43:07Reported by WordfenceType

Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass

Reporter	Title	Published	Views	Family All 8
CNNVD	WordPress Plugin Sixteen XforWooCommerce Add-On Plugins 安全漏洞	7 Jun 202300:00	–	cnnvd
Cvelist	CVE-2021-4337 Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization	7 Jun 202312:43	–	cvelist
EUVD	EUVD-2021-34164	3 Oct 202520:07	–	euvd
NVD	CVE-2021-4337	7 Jun 202313:15	–	nvd
Prion	Authorization	7 Jun 202313:15	–	prion
Positive Technologies	PT-2023-12440 · Woocommerce +1 · Improved Product Options For Woocommerce +15	7 Jun 202300:00	–	ptsecurity
RedhatCVE	CVE-2021-4337	6 Feb 202504:22	–	redhatcve
Vulnrichment	CVE-2021-4337 Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization	7 Jun 202312:43	–	vulnrichment

NVD

Vulners

Node

xforwoocommerce add_product_tabsRange<1.5.0wordpress

xforwoocommerce autopilot_seoRange<1.6.0wordpress

xforwoocommerce bulk_add_to_cartRange<1.3.0wordpress

xforwoocommerce comment_and_review_spam_controlRange<1.5.0wordpress

xforwoocommerce floating_cartRange<1.3.0wordpress

xforwoocommerce improved_product_optionsRange<5.3.0wordpress

xforwoocommerce improved_sale_badgesRange<4.4.0wordpress

xforwoocommerce live_product_editorRange<4.7.0wordpress

xforwoocommerce live_searchRange<2.1.0wordpress

xforwoocommerce package_quantityRange<1.2.0wordpress

xforwoocommerce price_commanderRange<1.3.0wordpress

xforwoocommerce product_filterRange<8.2.0wordpress

xforwoocommerce product_loopsRange<1.7.0wordpress

xforwoocommerce share,_print_and_pdf_productsRange<2.8.0wordpress

xforwoocommerce warranties_and_returnsRange<5.3.0wordpress

xforwoocommerce xforwoocommerceRange<1.7.0wordpress

[
  {
    "vendor": "XforWooCommerce",
    "product": "Package Quantity Discount",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.2.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Price Commander for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Bulk Add to Cart for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Floating Cart for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Comment and Review Spam Control for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.5.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Add Product Tabs for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.5.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Autopilot SEO for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.6.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "XforWooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.7.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Product Loops for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.7.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Live Search for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Share, Print and PDF Products for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.8.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Improved Sale Badges for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "4.4.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Live Product Editor for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "4.7.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Warranties and Returns for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Improved Product Options for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "XforWooCommerce",
    "product": "Product Filter for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.2.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
xforwoocommerce	www.xforwoocommerce.com/blog/change-log/xforwoocommerce-1-7-0/
blog	www.blog.nintechnet.com/16-woocommerce-product-add-ons-plugins-fixed-vulnerabilities/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/05481984-7c18-4ec7-8d7c-831809c3e86b

08 Apr 2026 17:16Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.8

EPSS0.0019

SSVC

CWE-862