CVE-2023-35912

Cross-Site Request Forgery CSRF vulnerability in WP Zone Potent Donations for WooCommerce plugin = 1.1.9 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WP Zone Potent Donations for WooCommerce plugin = 1.1.9 versions...

Wordpress Plugin Potent Donations for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Wordpress Plugin Potent Donations for...

CVE-2021-4395

The Abandoned Cart Recovery for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the getitems and extratablenav functions. This makes it possible for unauthenticated...

CVE-2021-4395

The Abandoned Cart Recovery for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the getitems and extratablenav functions. This makes it possible for unauthenticated...

CVE-2021-4391

The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the mwbwgmsavepost function. This makes it possible for unauthenticated attackers to modify...

CVE-2021-4391

The CVE-2021-4391 entry describes a Cross‑Site Request Forgery vulnerability in the WordPress plugin “Ultimate Gift Cards for WooCommerce.” Affected versions are up to and including 2.1.1, caused by missing or incorrect nonce validation in the mwb_wgm_save_post() function. This allows unauthentic...

CVE-2023-29423

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin = 1.3.2 versions...

CVE-2023-29423

CVE-2023-29423 corresponds to the WordPress Cancel order request WooCommerce plugin vulnerability. Public sources confirm an Auth. (admin+) Stored Cross-Site Scripting (XSS) flaw affecting the plugin’s Cancel order request / Return order / Repeat Order / Reorder endpoints in versions

CVE-2023-28991

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin = 3.0.19 versions...

CVE-2023-28991

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin = 3.0.19 versions...

CVE-2023-28991

CVE-2023-28991 corresponds to a Stored XSS vulnerability in the PI Websolution Order date, Order pickup, Order date time, Pickup Location, and delivery date components of the WP plugin for WooCommerce, affected

CVE-2023-28988 WordPress Direct checkout, Add to cart redirect for Woocommerce Plugin <= 2.1.48 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin = 2.1.48 versions...

PT-2023-22250 · WordPress · Pi Websolution Cancel Order Request / Return Order / Repeat Order / Reorder For Woocommerce

Name of the Vulnerable Software and Affected Versions: PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin versions prior to 1.3.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+...

PT-2023-22065 · WordPress · Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce plugin versions = 2.1.48 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability in the PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, and...

VulnCheck KEV: CVE-2023-2986

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated...

CVE-2023-34170

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...

CVE-2023-34170

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...

CVE-2023-34170

CVE-2023-34170 : Stored XSS in the WordPress plugin “WP Overnight Quick/Bulk Order Form for WooCommerce” (versions up to 3.5.7). Root cause: insufficient sanitization/escaping of input parameters, enabling authenticated users (admin+) to inject script that can be stored and later reflected to sit...

CVE-2023-34170 WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...