piwebsolution records
10 published records for vendor piwebsolution.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-502 Deserialization of Untrusted Data1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-3603No exploit | Export customers list CSV for WooCommerce < 2.0.69 - CSV Injectionpiwebsolution · export customers list csv for woocommerce · CWE-1236 | Critical9.8 | — | 1.1% | Nov 28, 2022 |
35Monitor | CVE-2024-8922No exploit | Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.phppiwebsolution · product enquiry for woocommerce · CWE-502 | High8.8 | — | 0.8% | Sep 27, 2024 |
35Monitor | CVE-2022-47154No exploit | WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)piwebsolution · css js manager\, async javascript\, defer render blocking css supports woocommerce · CWE-352 | High8.8 | — | 0.3% | Mar 14, 2023 |
35Monitor | CVE-2023-34015No exploit | WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)piwebsolution · advanced-free-flat-shipping-woocommerce · CWE-352 | High8.8 | — | 0.2% | Jul 11, 2023 |
19Monitor | CVE-2023-29093No exploit | WordPress Conditional extra fees for woocommerce Plugin <= 1.0.96 is vulnerable to Cross Site Scripting (XSS)piwebsolution · conditional cart fee \/ extra charge rule for woocommerce extra fees · CWE-79 | Medium4.8 | — | 0.4% | Jun 26, 2023 |
19Monitor | CVE-2023-29094No exploit | WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)piwebsolution · product page shipping calculator for woocommerce · CWE-79 | Medium4.8 | — | 0.4% | Apr 7, 2023 |
19Monitor | CVE-2023-28988No exploit | WordPress Direct checkout, Add to cart redirect for Woocommerce Plugin <= 2.1.48 is vulnerable to Cross Site Scripting (XSS)piwebsolution · add-to-cart-direct-checkout-for-woocommerce · CWE-79 | Medium4.8 | — | 0.4% | Jun 26, 2023 |
19Monitor | CVE-2023-29423No exploit | WordPress Cancel order request WooCommerce Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)piwebsolution · cancel order request \/ return order \/ repeat order \/ reorder for woocommerce · CWE-79 | Medium4.8 | — | 0.4% | Jun 26, 2023 |
19Monitor | CVE-2023-29170No exploit | WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)piwebsolution · product enquiry for woocommerce · CWE-79 | Medium4.8 | — | 0.4% | Apr 7, 2023 |
19Monitor | CVE-2023-28991No exploit | WordPress Order date time for WooCommerce Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)piwebsolution · pi-woocommerce-order-date-time-and-type · CWE-79 | Medium4.8 | — | 0.4% | Jun 26, 2023 |
- CVE-2022-360339Monitor
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
CriticalCVSS 9.8No exploitEPSS 1%piwebsolution · export customers list csv for woocommerceNov 28, 2022
- CVE-2024-892235Monitor
Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
HighCVSS 8.8No exploitEPSS 1%piwebsolution · product enquiry for woocommerceSep 27, 2024
- CVE-2022-4715435Monitor
WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%piwebsolution · css js manager\, async javascript\, defer render blocking css supports woocommerceMar 14, 2023
- CVE-2023-3401535Monitor
WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%piwebsolution · advanced-free-flat-shipping-woocommerceJul 11, 2023
- CVE-2023-2909319Monitor
WordPress Conditional extra fees for woocommerce Plugin <= 1.0.96 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%piwebsolution · conditional cart fee \/ extra charge rule for woocommerce extra feesJun 26, 2023
- CVE-2023-2909419Monitor
WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%piwebsolution · product page shipping calculator for woocommerceApr 7, 2023
- CVE-2023-2898819Monitor
WordPress Direct checkout, Add to cart redirect for Woocommerce Plugin <= 2.1.48 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%piwebsolution · add-to-cart-direct-checkout-for-woocommerceJun 26, 2023
- CVE-2023-2942319Monitor
WordPress Cancel order request WooCommerce Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%piwebsolution · cancel order request \/ return order \/ repeat order \/ reorder for woocommerceJun 26, 2023
- CVE-2023-2917019Monitor
WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%piwebsolution · product enquiry for woocommerceApr 7, 2023
- CVE-2023-2899119Monitor
WordPress Order date time for WooCommerce Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%piwebsolution · pi-woocommerce-order-date-time-and-typeJun 26, 2023