Lucene search
+L

3 matches found

NVD
NVD
•added 2023/06/07 2:15 a.m.•32 views

CVE-2020-36731

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction function...

7.2CVSS6.4AI score0.01342EPSS
SaveExploits1References3
CVE
CVE
•added 2023/06/07 1:51 a.m.•85 views

CVE-2020-36731

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update and Stored Cross-Site Scripting in versions up to and including 2.3.1 . The root cause is a lack of authorization checks on the updateSettingsAction() function (trig...

7.2CVSS5.8AI score0.01342EPSS
SaveIn wildExploits1References3Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2020/02/27 12:00 a.m.•7 views

VulnCheck KEV: CVE-2020-36731

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction function...

7.2CVSS6.2AI score0.01342EPSS
SaveIn wildExploits1References3
Rows per page
Query Builder