Xootix

Waitlist Woocommerce

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-43134

  • EPSS 0.08%
  • Published 01.11.2024 15:15:38
  • Last modified 01.11.2024 20:24:53

Missing Authorization vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce ( Back in stock notifier ): from n/a through...

6.1

CVE-2024-8724

  • EPSS 0.92%
  • Published 14.09.2024 04:15:05
  • Last modified 27.09.2024 15:56:00

The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes i...

8.8

CVE-2024-5324

  • EPSS 37.22%
  • Published 06.06.2024 02:15:54
  • Last modified 21.11.2024 09:47:25

The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in versions 2.7.1 to 2.7.2. This makes it possible for au...

8.8

CVE-2022-0215

Exploit
  • EPSS 0.32%
  • Published 18.01.2022 17:15:10
  • Last modified 21.11.2024 06:38:09

The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings function found in the ~/includes/xoo-framework/ad...