Lucene search
+L

27 matches found

NVD
NVD
•added 2026/10/22 9:17 a.m.•3 views

CVE-2026-114701

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

6.5CVSS0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 8:55 a.m.•5 views

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

6.5CVSS0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/22 8:55 a.m.•1 views

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 8:55 a.m.•5 views

CVE-2026-114701

The xootix Waitlist Woocommerce ( Back in stock notifier ) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) . This issue affects versions up to and including 2.9.1 due to the improper neutralization of input during web page generation. While the documents confirm the existence ...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 8:55 a.m.•3 views

EUVD-2026-108082

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/22 8:55 a.m.•3 views

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.9.1...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:33 a.m.•19 views

CVE-2024-8724

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.4AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•40 views

CVE-2024-43134

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

4.3CVSS0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/01 2:17 p.m.•22 views

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

4.3CVSS6.9AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 2:17 p.m.•69 views

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

4.3CVSS0.00337EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•9 views

CVE-2024-43134: Missing Authorization

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

4.3CVSS5.9AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•21 views

PT-2024-30323 · WordPress · Waitlist Woocommerce

Name of the Vulnerable Software and Affected Versions: Waitlist Woocommerce Back in stock notifier versions n/a through 2.6 Description: The issue affects the Waitlist Woocommerce Back in stock notifier plugin due to a Missing Authorization vulnerability. This vulnerability allows exploitation of...

4.3CVSS6.5AI score0.00337EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•18 views

WordPress plugin Waitlist Woocommerce has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.6AI score0.00337EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/09/16 7:15 a.m.•17 views

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.7.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.7.5...

6.1CVSS6.3AI score0.00375EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/09/14 4:15 a.m.•34 views

CVE-2024-8724

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00375EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/09/14 3:19 a.m.•48 views

CVE-2024-8724 Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00375EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/09/14 3:19 a.m.•14 views

CVE-2024-8724 Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.4AI score0.00375EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/14 3:19 a.m.•75 views

CVE-2024-8724

CVE-2024-8724 affects the WordPress Waitlist Woocommerce (Back in stock notifier) plugin. A reflected XSS exists in all versions up to 2.7.5 due to improper escaping when constructing URLs with add_query_arg, enabling unauthenticated attackers to inject scripts if a user clicks a manipulated link...

6.1CVSS6.3AI score0.00375EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/14 12:00 a.m.•8 views

CVE-2024-8724: Improper Neutralization of Input During Web Page Generation

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score0.00375EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/08/07 10:35 a.m.•22 views

WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.6...

4.3CVSS7AI score0.00337EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder