CVE-2021-25077

CVE-2021-25077 affects the WordPress Store Toolkit for WooCommerce plugin prior to version 2.3.2. The vulnerability arises from insufficient sanitisation/escaping of the tab parameter in an admin page error message, enabling Reflected Cross-Site Scripting. Public sources (NVD, Red Hat, CNVD, CVE ...

CVE-2016-10922

The CVE-2016-10922 entry concerns the WordPress plugin WooCommerce Store Toolkit (woocommerce-store-toolkit) with privilege escalation affecting versions before 1.5.7. The connected documents corroborate that the vulnerability is a privilege escalation issue in this plugin; they do not provide ad...

CVE-2016-10923

The CVE-2016-10923 entry concerns the WordPress plugin woocommerce-store-toolkit . Multiple connected documents corroborate a privilege escalation vulnerability in this plugin, affecting versions prior to 1.5.8 . The attack surface is limited to the plugin component, and the underlying cause is d...