Show filters
100 Total Results
Displaying 31-40 of 100
Sort by:
Attacker Value
Unknown
CVE-2023-3547
Disclosure Date: September 25, 2023 (last updated October 08, 2023)
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
0
Attacker Value
Unknown
CVE-2023-34004
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Box Office plugin <= 1.1.50 versions.
0
Attacker Value
Unknown
CVE-2023-33317
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.
0
Attacker Value
Unknown
CVE-2023-32802
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 1.9.0 versions.
0
Attacker Value
Unknown
CVE-2023-32801
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Composite Products plugin <= 8.7.5 versions.
0
Attacker Value
Unknown
CVE-2023-32793
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 2.0.0 versions.
0
Attacker Value
Unknown
CVE-2023-32746
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.45 versions.
0
Attacker Value
Unknown
CVE-2023-32575
Disclosure Date: August 25, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions.
0
Attacker Value
Unknown
CVE-2023-37873
Disclosure Date: August 05, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions.
0
Attacker Value
Unknown
CVE-2023-3508
Disclosure Date: July 31, 2023 (last updated October 08, 2023)
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks
0
