CVE-2024-9377: Improper Neutralization of Input During Web Page Generation

The Products, Order & Customers Export for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.0.15. This makes it possible for unauthenticat...

CVE-2024-43127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

PT-2024-30315

Name of the Vulnerable Software and Affected Versions WPFactory Products, Order & Customers Export for WooCommerce versions 2.0.11 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for...

CVE-2024-43127: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

CVE-2024-31276

CVE-2024-31276 affects the WordPress plugin “Products, Order & Customers Export for WooCommerce” (WPFactory) versions up to 2.0.8. The issue is a Broken/ Missing Authorization vulnerability (Broken Access Control) that permits unauthenticated access to export-related data. Public references repor...

PT-2024-23921

Name of the Vulnerable Software and Affected Versions WPFactory Products, Order & Customers Export for WooCommerce versions 2.0.8 and earlier Description The issue is related to a Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce. This vulnerabili...

CVE-2024-31276: Missing Authorization

Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.8...

CVE-2023-47547: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFactory Products, Order & Customers Export for WooCommerce plugin = 2.0.7 versions...