Vidish vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.3%	CVE-2026-96828Category Discount Woocommerce (WordPress plugin) · SQL Injection High7.6EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96828 Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions. EPSS 0.3%Vulnerability Vidish CWE-89	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2025-69088Combo Offers WooCommerce (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69088 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vidish Combo Offers WooCommerce woo-combo-offers allows DOM-Based XSS.This issue affects Combo Offers WooCommerce: from n/a through <= 4.2. EPSS 0.2%Vulnerability Vidish	CVE Database V5	2025-12-30
Medium	5.3	EPSS 0.5%	CVE-2024-0617Simple Discount Rules for Woocommerce (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.5%2024-01-25CVE Database V5CVE-2024-0617 The Category Discount Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcd_save_discount() function in all versions up to, and including, 4.12. This makes it possible for unauthenticated attackers to modify product category discounts that could lead to loss of revenue. EPSS 0.5%Vulnerability vidishp CWE-862	CVE Database V5	2024-01-25

Page 1 of 1