Vendor
high
advisory
Stored XSS in WPC Product Options for WooCommerce
1 TTP 1 CVEThe WPC Product Options for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via improper sanitization of multipart form field names starting with 'wpcpo-'.
WPC Product Options for WooCommerce
1t
1c
high
advisory
Privilege Escalation in WPC Shop as a Customer for WooCommerce
1 rule 1 TTP 1 CVEAn improper role validation vulnerability in the WPC Shop as a Customer for WooCommerce plugin allows authenticated attackers to perform account takeover and gain administrative access via the wpcsa_login endpoint.
WPC Shop as a Customer for WooCommerce
wordpress
privilege-escalation
web-application
1r
1t
1c
high
advisory
Stored Cross-Site Scripting in WPC Product Bundles for WooCommerce
1 ruleThe WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored XSS via the 'qty' parameter, allowing unauthenticated attackers to execute arbitrary scripts in the context of administrative or user sessions.
WPC Product Bundles for WooCommerce
web-application-vulnerability
xss
wordpress
1r