Woo

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33331 Dec 18, 23:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.1.76. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Product Vendors Woo

NVD

CVSS 3.1

8.5

EPSS

0.1%

CVE-2023-35879 Oct 31, 15:15 HIGH This Week

A vulnerability in Woo WooCommerce Product Vendors woocommerce-product-vendors.1.78. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Wordpress Plugin Product Vendors Woo

NVD

CVSS 3.1

7.6

EPSS

0.4%

CVE-2023-33331

EPSS 0% CVSS 8.5

HIGH This Week

WordPress SQLi Product Vendors +1

NVD

CVE-2023-35879

EPSS 0% CVSS 7.6

HIGH This Week

WordPress SQLi Wordpress Plugin +2

NVD