Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2021-4372
Disclosure Date: June 07, 2023 (last updated October 08, 2023)
The WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.4.1. This is due to missing sanitization on the settings imported via the import() function. This makes it possible for unauthenticated attackers to import a settings file containing malicious JavaScript that would execute when an administrator accesses the settings area of the site.
0
Attacker Value
Unknown
CVE-2022-43488
Disclosure Date: October 30, 2022 (last updated December 22, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to rule type migration.
0
Attacker Value
Unknown
CVE-2022-43491
Disclosure Date: October 30, 2022 (last updated December 22, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import.
0
Attacker Value
Unknown
CVE-2022-38095
Disclosure Date: September 14, 2022 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 at WordPress.
0
