Vulnerabilities
Vulnerable Software
Security Vulnerabilities - CVEs Published In October 2023
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.102 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-10-26
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-10-26
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-10-26
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-10-26
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <= 6.5.3 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-10-26
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vark Minimum Purchase for WooCommerce plugin <= 2.0.0.1 versions.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-10-26
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-10-26
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Borbis Media FreshMail For WordPress plugin <= 2.3.2 versions.
CVSS Score
5.8
EPSS Score
0.001
Published
2023-10-26
Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowledgebase plugin <= 1.3.4 versions.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-10-26
The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users with a role as low as Editor to perform SSRF attacks
CVSS Score
8.8
EPSS Score
0.003
Published
2023-10-26


Contact Us

Shodan ® - All rights reserved