CVE-2024-43127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

CVE-2024-31276

CVE-2024-31276 affects the WordPress plugin “Products, Order & Customers Export for WooCommerce” (WPFactory) versions up to 2.0.8. The issue is a Broken/ Missing Authorization vulnerability (Broken Access Control) that permits unauthenticated access to export-related data. Public references repor...