Filtered by vendor Berocket Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-23667 1 Berocket 1 Brands For Woocommerce 2024-11-21 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <= 3.7.0.6 versions.
CVE-2022-2518 1 Berocket 1 Stockists Manager For Woocommerce 2024-11-21 8.8 High
The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockist_settings_main() function. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE-2022-0399 1 Berocket 1 Advanced Product Labels For Woocommerce 2024-11-21 6.1 Medium
The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it back in the berocket_apl_color_listener AJAX action's response, leading to a Reflected Cross-Site Scripting
CVE-2021-24432 1 Berocket 1 Advanced Ajax Product Filters 2024-11-21 6.1 Medium
The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-Site Scripting issue.