Etoilewebdesign Ultimate Product Catalog
4 CVEs affecting Etoilewebdesign Ultimate Product Catalog. Latest disclosed: 2023-06-27. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12199 | Critical | 9.8 | 2017-08-02 | The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-… |
CVE-2021-24993 | Medium | 6.5 | 2022-02-07 | The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticat… |
CVE-2017-12200 | Medium | 6.1 | 2017-08-02 | The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component. |
CVE-2023-2711 | Medium | 4.8 | 2023-06-27 | The Ultimate Product Catalog WordPress plugin before 5.2.6 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |