PT-2024-24631

Name of the Vulnerable Software and Affected Versions Product Feed PRO for WooCommerce versions through 13.3.1 Description The issue is related to the insertion of sensitive information into log files. This can potentially expose sensitive data. Recommendations For versions through 13.3.1, update...

WordPress Product Feed PRO for WooCommerce plugin <= 13.3.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin Product Feed PRO for WooCommerce versions = 13.3.1...

CVE-2024-24800

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AdTribes.Io Product Feed PRO for WooCommerce allows Reflected XSS.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.2.5...

CVE-2024-24800

CVE-2024-24800 is a Reflected XSS vulnerability in AdTribes.Io Product Feed PRO for WooCommerce. The issue affects the Product Feed PRO for WooCommerce plugin, reportedly vulnerable in versions from n/a up to 13.2.5. Public-facing details align with an XSS flaw arising during web page generation ...

CVE-2024-24800: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AdTribes.Io Product Feed PRO for WooCommerce allows Reflected XSS.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.2.5...

PT-2024-20569 · Unknown · Adtribes.Io Product Feed Pro For Woocommerce

Name of the Vulnerable Software and Affected Versions: AdTribes.Io Product Feed PRO for WooCommerce versions through 13.2.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations...

WordPress Product Feed PRO for WooCommerce Plugin <= 13.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Product Feed PRO for WooCommerce Type Plugin Vulnerable versions = 13.2.5 Fixed in 13.2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24800 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 937a0dd44e83 Credits Rafie Muhamma...

CVE-2022-46793 WordPress Product Feed PRO for WooCommerce Plugin <= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AdTribes.Io Product Feed PRO for WooCommerce plugin = 12.4.4 versions...

CVE-2022-46793

CVE-2022-46793 describes a CSRF vulnerability in the WordPress plugin “Product Feed PRO for WooCommerce” by AdTribes.Io, affecting versions up to 12.4.4. The issue allows unauthenticated CSRF exploitation that can cause unintended actions such as updating plugin settings or projects. Patch inform...

PT-2023-15038 · Woocommerce · Adtribes.Io Product Feed Pro

Name of the Vulnerable Software and Affected Versions: AdTribes.Io Product Feed PRO for WooCommerce plugin versions = 12.4.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintend...

WordPress plugin Product Feed PRO for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-46793: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AdTribes.Io Product Feed PRO for WooCommerce plugin = 12.4.4 versions...

WordPress Product Feed PRO for WooCommerce Plugin <= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Product Feed PRO for WooCommerce Type Plugin Vulnerable versions = 12.4.4 Fixed in 12.4.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46793 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f469aaf3b8e7 Credits...

WordPress Product Feed PRO for WooCommerce Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Product Feed PRO for WooCommerce Plugin before 11.2.3...

CVE-2022-0426

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting...

CVE-2022-0426

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting...

CVE-2022-0426

CVE-2022-0426 affects WordPress Product Feed PRO for WooCommerce plugin versions before 11.2.3. The vulnerability arises because the rowCount parameter is not escaped before being echoed in the woosea_categories_dropdown AJAX action, which is available to any authenticated user, enabling reflecte...

CVE-2022-0426 Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting...

PT-2022-13175

Name of the Vulnerable Software and Affected Versions Product Feed PRO for WooCommerce WordPress plugin versions prior to 11.2.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It arises because the rowCount parameter is not properly escaped before being outputted in an...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Product Feed PRO for WooCommerce Plugin before 11.2.3...