PT-2022-26942 · WordPress · Advanced Dynamic Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that affects the Advanced Dynamic Pricing for WooCommerce plugin on WordPress, leading to the potential...

PT-2022-25229 · WordPress · Advanced Order Export For Woocommerce

Name of the Vulnerable Software and Affected Versions: Advanced Order Export For WooCommerce plugin versions = 3.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to the download of export files. This occurs in the Advanced Order Export For...

CVE-2022-3536

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization attacks when they can upload a file, an...

WordPress plugin Role Based Pricing for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A code issue vulnerability exists in the...

PT-2022-22760 · WordPress · Role Based Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: Role Based Pricing for WooCommerce WordPress plugin versions prior to 1.6.3 Description: The issue concerns a lack of authorization and proper CSRF checks, as well as inadequate validation of paths provided via user input. This allows...

PT-2022-25990 · WordPress · Villatheme Ald - Aliexpress Dropshipping/Fulfillment For Woocommerce

Name of the Vulnerable Software and Affected Versions: Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin version 1.1.0 and earlier Description: The issue concerns sensitive data exposure. The estimated number of potentially affected devices worldwide is not...

WordPress Mailchimp for WooCommerce Plugin < 2.7.1 SSRF Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-38470

Cross-Site Request Forgery CSRF vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...

Information disclosure

Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...

CVE-2022-38134 WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability

Authenticated subscriber+ Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...

CVE-2022-38134

CVE-2022-38134 affects the WordPress Customer Reviews for WooCommerce plugin (

CVE-2022-38470

CVE-2022-38470 is a CSRF vulnerability in the WordPress Customer Reviews for WooCommerce plugin, affecting versions

CVE-2022-38095

The CVE-2022-38095 entry concerns the WordPress plugin AlgolPlus Advanced Dynamic Pricing for WooCommerce (versions ≤ 4.1.3). Connected sources indicate a Cross-Site Request Forgery (CSRF) vulnerability arising from insufficient verification when updating settings, enabling actions authenticated ...

PT-2022-25275 · WordPress · Customer Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customer Reviews for WooCommerce plugin version 5.3.5 and earlier Description: The issue is related to an Unauthenticated Sensitive Information Disclosure. No information is provided about the estimated number of potentially affected devices...

PT-2022-24198 · Woocommerce · Algolplus Advanced Dynamic Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2022-24228 · WordPress · Customer Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customer Reviews for WooCommerce plugin version 5.3.5 and earlier Description: The issue is related to an Authenticated Broken Access Control vulnerability. This means that users with certain privileges, in this case, subscribers or higher, c...

PT-2022-24421 · WordPress · Customer Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customer Reviews for WooCommerce plugin versions = 5.3.5 Description: A Cross-Site Request Forgery CSRF issue affects the Customer Reviews for WooCommerce plugin at WordPress. This allows an attacker to perform unintended actions on a user's...

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to sending of test emails discovered by Muhammad Daffa Patchstack Alliance in WordPress Customer Reviews for WooCommerce plugin versions = 5.3.5. Solution Update the WordPress Customer Reviews for WooCommerce plugin to the latest available...

CVE-2022-2575

The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2022-2575

The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...