WooThemes güvenlik açıkları (CVE)

WooThemes için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
7.5Yüksek
CVE-2019-25779

WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar paramete…

5.3Orta
CVE-2024-9944

WooCommerce <= 9.0.2 - Unauthenticated HTML Injection

automattic WooCommerce; woothemes woocommerce

The WooCommerce plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 9.0.2. This is due to the plugin not properly neutralizing HTML elements from submitted order forms. This makes it possible for unauthenticated attacker…