Gravitymaster Product Enquiry For Woocommerce
6 CVEs affecting Gravitymaster Product Enquiry For Woocommerce. Latest disclosed: 2024-01-22. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47512 | High | 7.1 | 2023-11-16 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions. |
CVE-2023-47696 | High | 7.1 | 2023-11-13 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions. |
CVE-2023-7151 | Medium | 6.1 | 2024-01-16 | The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute, lead… |
CVE-2023-49761 | Medium | 5.4 | 2023-12-18 | Cross-Site Request Forgery (CSRF) vulnerability in Gravity Master Product Enquiry for WooCommerce.This issue affects Product Enquiry for WooCommerce: from n/a… |
CVE-2023-6626 | Medium | 4.8 | 2024-01-22 | The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not sanitise and escape some of its settings, which could allow high privilege users such… |
CVE-2023-6625 | Medium | 4.3 | 2024-01-22 | The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not have a CSRF check in place when deleting inquiries, which could allow attackers to mak… |