Plugin: WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping
Versions: <= 2.2.0
CVSS: 5.5/10
Correctif: 2.3.0

16 mars 2024

Lire

MoyenneCVSS 4.3

CVE-2024-29093

CSRF (Cross-Site Request Forgery) dans Builder for WooCommerce product reviews shortcodes – ReviewShort (<= 1.01.3)

Plugin: Builder for WooCommerce product reviews shortcodes – ReviewShort
Versions: <= 1.01.3
CVSS: 4.3/10
Correctif: 1.01.4

Défaut de contrôle d'accès, non authentifié, dans Ultimate Gift Cards for WooCommerce (<= 2.6.6)

Plugin: Ultimate Gift Cards for WooCommerce
Versions: <= 2.6.6
CVSS: 5.3/10
Correctif: 2.6.7

XSS (Cross-Site Scripting) dans YITH WooCommerce Product Add-Ons (<= 4.5.0)

Plugin: YITH WooCommerce Product Add-Ons
Versions: <= 4.5.0
CVSS: 6.1/10
Correctif: 4.6.0

XSS stocké, authentifié (Contributeur+), dans HUSKY – Products Filter Professional for WooCommerce (<= 1.3.5.1)

Plugin: HUSKY – Products Filter Professional for WooCommerce
Versions: <= 1.3.5.1
CVSS: 6.4/10
Correctif: 1.3.5.2

XSS stocké, authentifié (Contributeur+), dans ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin (<= 2.8.1)

Plugin: ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
Versions: <= 2.8.1
CVSS: 6.4/10
Correctif: 2.8.2

Injection SQL, authentifié (Contributeur+), dans HUSKY – Products Filter Professional for WooCommerce (<= 1.3.5.2)

Plugin: HUSKY – Products Filter Professional for WooCommerce
Versions: <= 1.3.5.2
CVSS: 8.8/10
Correctif: 1.3.5.3

Inclusion de fichier local (LFI), non authentifié, dans Premmerce Permalink Manager for WooCommerce (<= 2.3.10)

Plugin: Premmerce Permalink Manager for WooCommerce
Versions: <= 2.3.10
CVSS: 9.8/10
Correctif: 2.3.11

XSS stocké, authentifié (Contributeur+), dans Free Downloads WooCommerce (<= 3.5.8.2)

Plugin: Free Downloads WooCommerce
Versions: <= 3.5.8.2
CVSS: 6.4/10
Correctif: 3.5.8.3

CSRF (Cross-Site Request Forgery) dans Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails (<= 1.2.26)

Plugin: Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails
Versions: <= 1.2.26
CVSS: 4.3/10
Correctif: 1.2.27

XSS stocké, authentifié (Administrateur+), dans WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell (<= 3.0.6)

Plugin: WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
Versions: <= 3.0.6
CVSS: 4.4/10
Correctif: 3.0.7

13 mars 2024

Lire

1837 – 1848 sur 2556 articles