Rymera Web Co
7 CVEs in 6 Rymera Web Co products, including Wholesale Suite, Advanced Coupons (WordPress Plugin), Invoice Gateway For Woocommerce – Invoice Payment Gate…
Rymera Web Co products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-120856 | High | 7.1 | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rymera Web Co Invoice Gateway for WooCommerce – Invoice P… |
CVE-2026-103349 | High | 7.2 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Object Injection.This issue affec… |
CVE-2026-54838 | High | 8.5 | 2026-06-25 | Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. |
CVE-2024-38745 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesa… |
CVE-2022-34344 | Medium | 5.4 | 2024-01-08 | Missing Authorization vulnerability in Rymera Web Co Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynam… |
CVE-2022-41640 | Medium | 6.5 | 2023-05-09 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <= 2.1.5 versions. |
CVE-2022-43481 | Medium | 5.4 | 2022-11-08 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Coupons for WooCommerce Coupons plugin <= 4.5 on WordPress leading to notice dismissal. |