Woo Custom Emails

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-45004 Oct 17, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Woo Custom Emails

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2023-4315 Aug 31, 06:15 MEDIUM PATCH This Month

The Woo Custom Emails for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wcemails_edit' parameter in versions up to, and including, 2.2 due to insufficient input sanitization and. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Woo Custom Emails Wordpress Plugin

NVD VulDB

CVSS 3.1

6.1

EPSS

0.6%

CVE-2023-45004

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Woo Custom Emails

NVD

CVE-2023-4315

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

WordPress XSS Woo Custom Emails +1

NVD VulDB