Lucene search
+L

234 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•2 views

CVE-2025-22673: Missing Authorization

Missing Authorization vulnerability in WPFactory EAN for WooCommerce ean-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EAN for WooCommerce: from n/a through = 5.3.5...

4.3CVSS5.9AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:45 p.m.•25 views

CVE-2024-43127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

7.1CVSS6.8AI score0.00301EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 9:22 a.m.•12 views

CVE-2024-56228

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce.This issue affects Wishlist for WooCommerce: from n/a through = 3.1.2...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:02 a.m.•22 views

CVE-2024-49305

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: from n/a through = 2.8.10...

9.3CVSS5.9AI score0.00412EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:08 a.m.•19 views

CVE-2024-54332

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through = 1.2.0...

7.1CVSS7.2AI score0.00215EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:01 a.m.•12 views

CVE-2024-54209

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Awesome Shortcodes awesome-shortcodes allows Reflected XSS.This issue affects Awesome Shortcodes: from n/a through = 1.7.2...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:48 p.m.•17 views

CVE-2024-44061

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through = 2.12.14...

7.1CVSS5.9AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/31 11:15 a.m.•23 views

CVE-2024-56228

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce.This issue affects Wishlist for WooCommerce: from n/a through = 3.1.2...

7.1CVSS0.00276EPSS
SaveExploits0References1
Prion
Prion
•added 2024/12/31 11:15 a.m.•22 views

CVE-2024-56228

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce: Multi Wishlists Per Customer allows Reflected XSS.This issue affects Wishlist for WooCommerce: Multi Wishlists Per Customer: from n/a through 3.1.2...

0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•3 views

CVE-2024-56228: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce.This issue affects Wishlist for WooCommerce: from n/a through = 3.1.2...

7.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/16 3:15 p.m.•22 views

CVE-2024-54332

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through = 1.2.0...

7.1CVSS0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:14 p.m.•16 views

CVE-2024-54332 WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0...

7.1CVSS6.8AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•18 views

CVE-2023-23868

Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost of Goods for WooCommerce: from n/a through 2.8.6...

5.4CVSS0.00638EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:31 a.m.•26 views

CVE-2023-23868 WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost of Goods for WooCommerce: from n/a through 2.8.6...

5.4CVSS0.00638EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:31 a.m.•56 views

CVE-2023-23868

CVE-2023-23868 affects the WordPress plugin Cost of Goods for WooCommerce (

5.4CVSS8AI score0.00638EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•2 views

CVE-2023-23868: Missing Authorization

Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost of Goods for WooCommerce: from n/a through 2.8.6...

5.4CVSS7.9AI score0.00638EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 2:15 p.m.•19 views

CVE-2024-54209

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Awesome Shortcodes awesome-shortcodes allows Reflected XSS.This issue affects Awesome Shortcodes: from n/a through = 1.7.2...

7.1CVSS0.0027EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•4 views

CVE-2024-54209: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Awesome Shortcodes awesome-shortcodes allows Reflected XSS.This issue affects Awesome Shortcodes: from n/a through = 1.7.2...

7.1CVSS5.8AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/20 10:15 a.m.•31 views

CVE-2024-44061

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through = 2.12.14...

7.1CVSS0.00271EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/20 10:15 a.m.•17 views

CVE-2024-44061

: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WPFactory EU/UK VAT Manager for WooCommerce allows Cross-Site Scripting XSS.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through 2.12.14...

6.1CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder