Cristiano Zanca vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.1%	CVE-2025-58991WooCommerce Booking Bundle Hours (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-09-09CVE Database V5CVE-2025-58991 Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. This issue affects WooCommerce Booking Bundle Hours: from n/a through 0.7.4. EPSS 0.1%Vulnerability Cristiano Zanca CWE-352	CVE Database V5	2025-09-09
High	7.1	EPSS 0.3%	CVE-2025-30837WooCommerce Fattureincloud (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-04-01CVE Database V5CVE-2025-30837 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristiano Zanca WooCommerce Fattureincloud woo-fattureincloud allows Reflected XSS.This issue affects WooCommerce Fattureincloud: from n/a through <= 2.6.7. EPSS 0.3%Vulnerability Cristiano Zanca	CVE Database V5	2025-04-01

Page 1 of 1