3540 matches found
CVE-2023-46094
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin = 6.5.3 versions...
CVE-2023-46076
Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin = 1.2.102 versions...
CVE-2023-30492
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Vark Minimum Purchase for WooCommerce plugin = 2.0.0.1 versions...
CVE-2023-30492 WordPress Minimum Purchase for WooCommerce Plugin <= 2.0.0.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Vark Minimum Purchase for WooCommerce plugin = 2.0.0.1 versions...
PT-2023-29844 · WordPress · Conversios Track Google Analytics 4
Name of the Vulnerable Software and Affected Versions: Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin versions = 6.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an...
PT-2023-22728 · Woocommerce · Vark Minimum Purchase For Woocommerce
Name of the Vulnerable Software and Affected Versions: Vark Minimum Purchase for WooCommerce plugin versions = 2.0.0.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher permissions. The vulnerability allows for the...
CVE-2023-46078
Cross-Site Request Forgery CSRF vulnerability in PluginEver WC Serial Numbers plugin = 1.6.3 versions...
CVE-2023-4821
The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts...
CVE-2023-4821 Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts...
CVE-2023-45638
Cross-Site Request Forgery CSRF vulnerability in euPago Eupago Gateway For Woocommerce plugin = 3.1.9 versions...
CVE-2023-45638
Cross-Site Request Forgery CSRF vulnerability in euPago Eupago Gateway For Woocommerce plugin = 3.1.9 versions...
PT-2023-29614 · WordPress · Eupago Eupago Gateway For Woocommerce
Name of the Vulnerable Software and Affected Versions: euPago Eupago Gateway For Woocommerce plugin versions = 3.1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...
PT-2023-29173 · Rebing Oõ · Woocommerce Esto Plugin
Name of the Vulnerable Software and Affected Versions: Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin versions = 2.23.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...
CVE-2023-40559
Cross-Site Request Forgery CSRF vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin = 2.4.0 versions...
CVE-2023-40559
Cross-Site Request Forgery CSRF vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin = 2.4.0 versions...
WordPress Plugin Dynamic Pricing and Discount Rules for WooCommerce Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. The WordPress Plugin Dynamic Pricing and Discount Rules...
CVE-2023-39158
Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...
CVE-2023-39158
Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...
