Villatheme Orders Tracking For Woocommerce
2 CVEs affecting Villatheme Orders Tracking For Woocommerce. Latest disclosed: 2023-09-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25062 | Medium | 6.1 | 2022-01-24 | The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outputting it back in an admin page, leadin… |
CVE-2023-4216 | Low | 2.7 | 2023-09-04 | The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing a CSV file, allowing high privilege us… |