Vulnerabilidades de WooThemes (CVE)

Registros CVE publicados para WooThemes, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
7.5Alta
CVE-2019-25779

WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar paramete…

5.3Media
CVE-2024-9944

WooCommerce <= 9.0.2 - Unauthenticated HTML Injection

automattic WooCommerce; woothemes woocommerce

The WooCommerce plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 9.0.2. This is due to the plugin not properly neutralizing HTML elements from submitted order forms. This makes it possible for unauthenticated attacker…