Wpwham

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-47660 Nov 14, 17:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Product Visibility By Country For Woocommerce Wpwham

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2022-29425 May 20, 20:15 MEDIUM This Month

Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Checkout Files Upload For Woocommerce Wpwham

NVD

CVSS 3.1

6.1

EPSS

0.7%

CVE-2019-18668 Nov 02, 16:15 MEDIUM This Month

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin Currency Switcher For Woocommerce Wpwham

NVD

CVSS 3.1

6.5

EPSS

1.8%

CVE-2023-47660

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Product Visibility By Country For Woocommerce +1

NVD

CVE-2022-29425

EPSS 1% CVSS 6.1

MEDIUM This Month

WordPress XSS Wordpress Plugin +2

NVD

CVE-2019-18668

EPSS 2% CVSS 6.5

MEDIUM This Month

WordPress Information Disclosure Wordpress Plugin +2

NVD