Vulnerabilidades en wpcodefactory

22 resultados
CVE-2024-4185HIGHCustomer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient RandomnessEPSS 0.9%CVE-2024-9189MEDIUMEU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing AuthorizationEPSS 0.5%CVE-2024-13528HIGHCustomer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via ShortcodeEPSS 0.4%CVE-2024-11330MEDIUMCustom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-11361MEDIUMPDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-13525MEDIUMCustomer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information ExposureEPSS 0.4%CVE-2024-9377MEDIUMProducts, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-8788MEDIUMEU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-0821MEDIUMCost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2023-6897MEDIUMEAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via ShortcodeEPSS 0.4%CVE-2024-9384MEDIUMQuantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-9205MEDIUMMaximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-9232MEDIUMDownload Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2023-6892MEDIUMEAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta ShortcodeEPSS 0.3%CVE-2024-11814MEDIUMAdditional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2026-1381MEDIUMOrder Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content FieldsEPSS 0.3%CVE-2025-10167MEDIUMStock History & Reports Manager for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-6962MEDIUMCost of Goods: Product Cost & Profit Calculator for WooCommerce <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2024-13774MEDIUMWishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist NameEPSS 0.2%CVE-2024-7501MEDIUMDownload Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request ForgeryEPSS 0.2%