CVE-2023-28991

CVE-2023-28991 corresponds to a Stored XSS vulnerability in the PI Websolution Order date, Order pickup, Order date time, Pickup Location, and delivery date components of the WP plugin for WooCommerce, affected

CVE-2023-28988 WordPress Direct checkout, Add to cart redirect for Woocommerce Plugin <= 2.1.48 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin = 2.1.48 versions...

PT-2023-22250 · WordPress · Pi Websolution Cancel Order Request / Return Order / Repeat Order / Reorder For Woocommerce

Name of the Vulnerable Software and Affected Versions: PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin versions prior to 1.3.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+...

PT-2023-22065 · WordPress · Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce plugin versions = 2.1.48 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability in the PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, and...

CVE-2023-28988: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin = 2.1.48 versions...

VulnCheck KEV: CVE-2023-2986

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated...

CVE-2023-34170

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...

CVE-2023-34170

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...

CVE-2023-34170

CVE-2023-34170 : Stored XSS in the WordPress plugin “WP Overnight Quick/Bulk Order Form for WooCommerce” (versions up to 3.5.7). Root cause: insufficient sanitization/escaping of input parameters, enabling authenticated users (admin+) to inject script that can be stored and later reflected to sit...

CVE-2023-34170 WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin = 3.5.7 versions...

Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites

A critical security flaw has been disclosed in the WordPress "Abandoned Cart Lite for WooCommerce" plugin that's installed on more than 30,000 websites. "This vulnerability makes it possible for an attacker to gain access to the accounts of users who have abandoned their carts, who are typically...

WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)

Software Event Manager for WooCommerce Type Plugin Vulnerable versions = 3.9.5 Fixed in 3.9.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36383 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8cd145419482 Credits emad...

WordPress plugin Abandoned Cart Lite for WooCommerce – Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2023-32118

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin = 1.2.1 versions...

CVE-2023-32118

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin = 1.2.1 versions...

CVE-2023-32118

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin = 1.2.1 versions...

CVE-2023-32118

CVE-2023-32118 affects the WPoperation SALERT – Fake Sales Notification WooCommerce plugin, vulnerable in versions

CVE-2023-2986

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated...

CVE-2023-2986 Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated...

CVE-2021-4379 WooCommerce Multi Currency <= 2.1.17 - Missing Authorization

The WooCommerce Multi Currency plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wmcbulkfixedprice function in versions up to, and including, 2.1.17. This makes it possible for authenticated attackers, with subscriber-level permissions and above, ...