2 matches found
EUVD-2025-204634
The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them...
6.1AI score0.00182EPSS
SaveExploits0References3
CVE-2024-13511
The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settingsinit function, which processes a reset action based on specific query...
4.3CVSS5.8AI score0.00187EPSS
SaveExploits0References3
20