CVE-2023-52186

CVE-2023-52186 is a missing-authz vulnerability in the WordPress plugin “WooCommerce Product Vendors” affecting versions up to 2.2.2. The CVE’s base metrics (NVD) show CVSS 3.1, 5.3 (Medium), with network attack vector, no privileges required, no user interaction, and no confidentiality impact bu...

CVE-2023-35879

CVE-2023-35879 affects the WooCommerce Product Vendors WordPress plugin (versions

CVE-2017-20193

The set of connected documents confirms CVE-2017-20193 affects the WordPress Plugin “Product Vendors” (versions up to and including 2.0.35). The vulnerability is a Reflected Cross-Site Scripting via the vendor_description parameter caused by insufficient input sanitization and output escaping. Th...

CVE-2023-33331

CVE-2023-33331 affects the WooCommerce Product Vendors plugin (versions 2.1.76 and earlier). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands. Public references indicate a fixed version: 2.1.77. Patch sources (Patchstack) describe this as a low-s...