Adtribes

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-32087 Apr 15, 08:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Product Feed on WooCommerce for Google.5.7. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Google Product Feed Pro For Woocommerce Adtribes

NVD

CVSS 3.1

7.6

EPSS

0.3%

CVE-2022-0426 Mar 07, 09:15 MEDIUM POC PATCH This Month

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the woosea_categories_dropdown AJAX action. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress XSS Product Feed Pro For Woocommerce Wordpress Plugin Adtribes

NVD WPScan

CVSS 3.1

5.4

EPSS

0.7%

CVE-2024-32087

EPSS 0% CVSS 7.6

HIGH This Week

WordPress SQLi Google +2

NVD

CVE-2022-0426

EPSS 1% CVSS 5.4

MEDIUM POC PATCH This Month

WordPress XSS Product Feed Pro For Woocommerce +2

NVD WPScan