Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Gdpr Cookie Consent
MEDIUM 6.5
The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions, which could allow attackers to make l…
Gdpr Cookie Consent
MEDIUM 5.4
The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP headers when logging them, allowing visi…
Product Import Export For Woocommerce
HIGH 7.6
The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server-Side Request Forgery in all …
Product Import Export For Woocommerce
HIGH 7.2
The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all version…
Product Import Export For Woocommerce
MEDIUM 6.5
The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insu…
Import Export Wordpress Users
HIGH 7.2
The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via …
Import Export Wordpress Users
MEDIUM 6.5
The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in t…
Import Export Wordpress Users
HIGH 7.6
The Export and Import Users and Customers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6…
Order Export \& Order Import For Woocommerce
HIGH 7.2
The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.…
Order Export \& Order Import For Woocommerce
MEDIUM 6.5
The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validatio…
Order Export \& Order Import For Woocommerce
MEDIUM 6.5
The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin…
Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels
HIGH 7.2
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege…
Backup And Migration
HIGH 7.5
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migrat…
Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels
MEDIUM 5.3
The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized modification of da…
Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels
MEDIUM 6.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce PDF Invoices, Packing Sli…
Product Import Export For Woocommerce
HIGH 7.2
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Ex…
Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels
MEDIUM 6.1
The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
Order Export \& Order Import For Woocommerce
HIGH 7.2
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Expor…
Product Import Export For Woocommerce
HIGH 7.2
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Ex…
Stripe Payment Plugin For Woocommerce
HIGH 7.5
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and inclu…
Import Export Wordpress Users
HIGH 7.2
The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on th…
Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels
MEDIUM 6.5
The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due…
Decorator
HIGH 8.8
Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross Site Request Forgery.This issue af…
Backup And Migration
MEDIUM 5.4
The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as l…
Wordpress Comments Import And Export
CRITICAL 9.8
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress …
Product Reviews Import Export For Woocommerce
CRITICAL 9.8
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects…
Stripe Payment Plugin For Woocommerce
CRITICAL 9.8
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This i…
Stripe Payment Plugin For Woocommerce
MEDIUM 5.3
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o…
Import Export Wordpress Users
HIGH 7.2
The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o…
Import Export Wordpress Users
HIGH 8.8
The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.