همهٔ محصولات
wc-vendors
WordPress · افزونه10 گزارش| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|
| WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.7.2.1 - Authenticated (Administrator+) SQL InjectionCVE-2026-66625 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors < 2.7.2.1 - Authenticated (Custom Role+) Insecure Direct Object ReferenceCVE-2026-81428 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors < 2.7.2.1 - Authenticated (Custom Role+) Insecure Direct Object ReferenceCVE-2026-81427 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors < 2.7.2.1 - Cross-Site Request ForgeryCVE-2026-81426 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' ParameterCVE-2026-15351 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.8 - Authenticated (Subscriber+) SQL InjectionCVE-2026-54838 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product DeletionCVE-2025-12130 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors Marketplace <= 2.5.6 - Authenticated (Administrator+) SQL InjectionCVE-2025-49263 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors Marketplace <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Sites Scripting via ShortcodeCVE-2023-0072 |
wc-vendors |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search datesCVE-2023-48327 |
wc-vendors |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
