Xootix

Waitlist Woocommerce

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-43134

  • EPSS 0.19%
  • Veröffentlicht 01.11.2024 15:15:38
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Missing Authorization vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce ( Back in stock notifier ): from n/a through...

6.1

CVE-2024-8724

  • EPSS 1.84%
  • Veröffentlicht 14.09.2024 04:15:05
  • Zuletzt bearbeitet 27.09.2024 15:56:00

The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes i...

8.8

CVE-2024-5324

  • EPSS 43.73%
  • Veröffentlicht 06.06.2024 02:15:54
  • Zuletzt bearbeitet 08.04.2026 17:19:01

Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attack...

8.8

CVE-2022-0215

Exploit
  • EPSS 0.32%
  • Veröffentlicht 18.01.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:38:09

The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings function found in the ~/includes/xoo-framework/ad...