Show filters
24 Total Results
Displaying 21-24 of 24
Sort by:
Attacker Value
Unknown

CVE-2022-44634

Disclosure Date: November 10, 2022 (last updated December 22, 2024)
Auth. (admin+) Arbitrary File Read vulnerability in S2W – Import Shopify to WooCommerce plugin <= 1.1.12 on WordPress.
Attacker Value
Unknown

CVE-2022-41623

Disclosure Date: October 12, 2022 (last updated October 08, 2023)
Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 on WordPress.
Attacker Value
Unknown

CVE-2022-1037

Disclosure Date: April 18, 2022 (last updated October 07, 2023)
The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs
Attacker Value
Unknown

CVE-2021-25062

Disclosure Date: January 24, 2022 (last updated February 23, 2025)
The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting