Doofinder records

4 published records for vendor doofinder.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2023-51678No exploit	WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Controldoofinder · doofinder · CWE-352 Pre-auth Broken access control (IDOR) CSRF	Medium6.5	—	0.2%	Jan 5, 2024
24Monitor	CVE-2023-40602No exploit	WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirectiondoofinder · doofinder · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.5%	Dec 19, 2023
24Monitor	CVE-2023-49185No exploit	WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)doofinder · doofinder · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 15, 2023
19Monitor	CVE-2024-25596No exploit	WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilitydoofinder · doofinder · CWE-79 XSS	Medium4.8	—	0.3%	Mar 15, 2024

CVE-2023-51678
26Monitor
WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control
MediumCVSS 6.5No exploitEPSS 0%
doofinder · doofinderJan 5, 2024
CVE-2023-40602
24Monitor
WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- Open redirect
doofinder · doofinderDec 19, 2023
CVE-2023-49185
24Monitor
WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
doofinder · doofinderDec 15, 2023
CVE-2024-25596
19Monitor
WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%
- XSS
doofinder · doofinderMar 15, 2024