Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-47698

WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Japanized For WooCommerce: from n/a through <= 2.6.4.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Artisanworkshop
Products
Japanized For Woocommerce
CVE-2023-0942

Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting

The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Artisanworkshop
Products
Japanized For Woocommerce
CVE-2023-0948

Japanized For WooCommerce < 2.5.8 - Reflected XSS

The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Artisanworkshop
Products
Japanized For Woocommerce