WordPress Plugin WooCommerce Customers Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-15526 · WordPress · Woocommerce Customers Manager

Name of the Vulnerable Software and Affected Versions: WooCommerce Customers Manager WordPress plugin versions prior to 29.7 Description: The issue is related to an SQL injection that occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can b...

WooCommerce Customers Manager < 29.8 - Reflected XSS

Description The plugin does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open the HTML page/URLs below...

WooCommerce Customers Manager < 29.8 - Reflected XSS

Description The plugin does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open the HTML page/URLs below...

WordPress Premmerce WooCommerce Customers Manager Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce WooCommerce Customers Manager Type Plugin Vulnerable versions = 1.1.13 Fixed in 1.1.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID b3dee6c5c8f0 Credits Rafie Muhamm...

WordPress Premmerce WooCommerce Customers Manager plugin <= 1.1.12 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Premmerce WooCommerce Customers Manager plugin versions = 1.1.12. Solution Update the WordPress Premmerce WooCommerce Customers Manager plugin to the latest available version at least 1.1.13...

WordPress Premmerce WooCommerce Customers Manager plugin <= 1.1.12 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Premmerce WooCommerce Customers Manager plugin versions = 1.1.12. Solution Update the WordPress Premmerce WooCommerce Customers Manager plugin to the latest available version at least 1.1.13...

Woocommerce Customers Manager < 26.6 - Authenticated Reflected Cross-Site Scripting (XSS)

The wccmcustomersids and wccmcustomersemails parameters are output in href attributes, after being sanitised with the sanitizetextfield function, which is not appropriate for such case, as payload such as ' injected-attribute=value will still be injected. This lead to a reflected XSS issue in the...

WordPress WooCommerce Customers Manager premium plugin <= 26.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by WPScan Team in WordPress WooCommerce Customers Manager premium plugin versions = 26.6. Solution Update the WordPress WooCommerce Customers Manager premium plugin to the latest available version at least 26.7...

WordPress WooCommerce Customers Manager premium plugin <= 26.4 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by John Castro Pagely.com in WordPress WooCommerce Customers Manager premium plugin versions = 26.4. Solution Update the WordPress WooCommerce Customers Manager premium plugin to the latest available version at least 26.5...

WordPress WooCommerce Customers Manager premium plugin <= 26.4 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by John Castro Pagely.com in WordPress WooCommerce Customers Manager premium plugin versions = 26.4. Solution Update the WordPress WooCommerce Customers Manager premium plugin to the latest available version at least 26.5...