Lucene search

Product Addons Security Vulnerabilities - April

cve

CVE-2023-32794

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions.

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-09 09:15 PM

cve

CVE-2023-32795

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3.

8.2CVSS

7AI Score

0.001EPSS

2023-12-28 11:15 AM

cve

CVE-2023-33331

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76.

8.5CVSS

7.3AI Score

0.001EPSS

2023-12-18 11:15 PM

cve

CVE-2023-33332

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Product Vendors plugin <= 2.1.76 versions.

7.1CVSS

6AI Score

0.0005EPSS

2023-05-28 07:15 PM