PT-2023-30497 · Wpfactory · Wpfactory Products

Name of the Vulnerable Software and Affected Versions: WPFactory Products, Order & Customers Export for WooCommerce plugin versions = 2.0.7 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts in...

CVE-2023-47657 WordPress Direct Checkout – Quick View – Buy Now For WooCommerce Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)

Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...

CVE-2023-47690

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

CVE-2023-4603

The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'printersettings' parameter in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2023-47696

Unauth. Stored Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...

CVE-2023-47690 WordPress Additional Order Filters for WooCommerce Plugin <= 1.10 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

CVE-2023-47690

CVE-2023-47690 is a publicly disclosed unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Additional Order Filters for WooCommerce. Affected versions are

CVE-2023-47696 WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...

CVE-2023-4603

CVE-2023-4603 affects the Star CloudPRNT for WooCommerce WordPress plugin. The vulnerability is a Reflected Cross-Site Scripting (XSS) via the printersettings parameter, exploitable in versions up to and including 2.0.3 due to insufficient input sanitization and output escaping. It allows unauthe...

CVE-2023-46634

Cross-Site Request Forgery CSRF vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting XSS.This issue affects Custom My Account for Woocommerce: from n/a through 2.1...

CVE-2023-46629

Cross-Site Request Forgery CSRF vulnerability in themelocation Remove Add to Cart WooCommerce plugin = 1.4.4...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in themelocation Remove Add to Cart WooCommerce plugin = 1.4.4...

CVE-2023-46629

CVE-2023-46629: CSRF in the WordPress Remove Add to Cart WooCommerce plugin

PT-2023-29809 · WordPress · Star Cloudprnt

Name of the Vulnerable Software and Affected Versions: Star CloudPRNT for WooCommerce plugin for WordPress versions up to, and including, 2.0.3 Description: The issue is related to Reflected Cross-Site Scripting via the printersettings parameter due to insufficient input sanitization and output...

PT-2023-30572 · Woocommerce · Gravity Master Product Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: Gravity Master Product Enquiry for WooCommerce plugin versions = 3.0 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be stored on the server and executed when...

WordPress Plugin Star CloudPRNT for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-30570 · WordPress · Anton Bond Additional Order Filters For Woocommerce

Name of the Vulnerable Software and Affected Versions: Anton Bond Additional Order Filters for WooCommerce plugin versions = 1.10 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

CVE-2023-32794

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Add-Ons plugin = 6.1.3 versions...

CVE-2023-34386

Cross-Site Request Forgery CSRF vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin = 4.7.1 versions...

CVE-2023-34386 WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin = 4.7.1 versions...