WPWeb Elite vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.3	EPSS 0.5%	CVE-2024-39650WooCommerce PDF Vouchers (WordPress plugin) · Missing Authorization High7.3EPSS 0.5%2024-11-01CVE Database V5CVE-2024-39650 Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4. EPSS 0.5%Vulnerability WPWeb Elite CWE-862	CVE Database V5	2024-11-01
Critical	9.3	EPSS 0.5%	CVE-2024-43132Docket (WooCommerce Collections / Wishlist / Watchlist) (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2024-08-29CVE Database V5CVE-2024-43132 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) allows SQL Injection.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0. EPSS 0.5%Vulnerability WPWeb Elite CWE-89	CVE Database V5	2024-08-29
High	7.1	EPSS 0.3%	CVE-2024-39652WooCommerce PDF Vouchers (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39652 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5. EPSS 0.3%Vulnerability WPWeb Elite CWE-79	CVE Database V5	2024-08-01

Page 1 of 1