WooThemes Schwachstellen (CVE)

Für WooThemes veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
7.5Hoch
CVE-2019-25779

WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar paramete…

5.3Mittel
CVE-2024-9944

WooCommerce <= 9.0.2 - Unauthenticated HTML Injection

automattic WooCommerce; woothemes woocommerce

The WooCommerce plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 9.0.2. This is due to the plugin not properly neutralizing HTML elements from submitted order forms. This makes it possible for unauthenticated attacker…