Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2023-41240

Disclosure Date: June 12, 2024 (last updated August 08, 2024)
Missing Authorization vulnerability in Vark Pricing Deals for WooCommerce.This issue affects Pricing Deals for WooCommerce: from n/a through 2.0.3.2.
Attacker Value
Unknown

CVE-2023-30492

Disclosure Date: October 26, 2023 (last updated October 31, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vark Minimum Purchase for WooCommerce plugin <= 2.0.0.1 versions.
Attacker Value
Unknown

CVE-2022-1057

Disclosure Date: July 11, 2022 (last updated February 24, 2025)
The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection