Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-24886

WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acowebs Product Labels For Woocommerce (Sale Badges) allows Stored XSS.This issue affects Product Labels For Woocommerce (Sale Badges): from n/a through 1.5.3.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Acowebs
Products
Product Labels For Woocommerce \(sale Badges\)
CVE-2024-10638

Product Labels For Woocommerce < 1.5.11 - Admin+ SQLi

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Acowebs
Products
Product Labels For Woocommerce \(sale Badges\)
CVE-2024-12109

Product Labels For Woocommerce < 1.5.9 - Admin+ SQLi

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Acowebs
Products
Product Labels For Woocommerce \(sale Badges\)