CVE-2025-66089

CVE-2025-66089 concerns the WebToffee Product Feed for WooCommerce plugin (Wordpress) versions up to and including 2.3.1, with a Missing Authorization vulnerability enabling exploitation of incorrectly configured access control. The CVSS v3.1 base score is 4.3 (Medium), and the exploit vector is ...

CVE-2025-58657

Cross-Site Request Forgery CSRF vulnerability in EdwardBock Grid grid allows Stored XSS.This issue affects Grid: from n/a through = 2.3.1...

CVE-2024-35669

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1...