Vulnerabilities in a3rev
8 resultsCVE-2024-12313HIGHCompare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object InjectionEPSS 0.8%CVE-2019-25144MEDIUMWP HTML Mail < 2.2.11 - HTML injectionEPSS 0.6%CVE-2024-1807MEDIUMProduct Sort and Display for WooCommerce <= 2.4.1 - Missing AuthorizationEPSS 0.6%CVE-2024-12435MEDIUMCompare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2025-2816HIGHPage View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options UpdateEPSS 0.3%CVE-2026-6427MEDIUMa3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video ElementEPSS 0.3%CVE-2025-9873MEDIUMa3 Lazy Load <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-5123MEDIUMContact Us Page – Contact People <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style ParameterEPSS 0.2%