cedcommerce records

8 published records for vendor cedcommerce.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-4298No exploit	Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Downloadcedcommerce · wholesale market · CWE-22 Pre-auth Path traversal	Critical9.8	—	1.8%	Jan 2, 2023
30Monitor	CVE-2022-4106No exploit	Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Downloadcedcommerce · wholesale market for woocommerce · CWE-552 Pre-auth	High7.5	—	0.9%	Dec 19, 2022
26Monitor	CVE-2022-4107No exploit	SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Downloadcedcommerce · smsa shipping for woocommerce · CWE-552 Pre-auth CSRF	Medium6.5	—	0.4%	Dec 19, 2022
26Monitor	CVE-2022-4363No exploit	Wholesale Market <= 2.2.2 - Settings Update via CSRFcedcommerce · wholesale market · CWE-352 Pre-auth CSRF	Medium6.5	—	0.2%	May 16, 2025
21Monitor	CVE-2024-5641No exploit	One Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingcedcommerce · one click order re-order · CWE-862 Broken access control (IDOR) XSS	Medium5.4	—	0.3%	Jul 4, 2024
19Monitor	CVE-2022-4108No exploit	Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Downloadcedcommerce · wholesale market for woocommerce · CWE-552	Medium4.9	—	0.8%	Dec 19, 2022
19Monitor	CVE-2023-47646No exploit	WordPress Recently viewed and most viewed products Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)cedcommerce · recently viewed and most viewed products · CWE-79 XSS	Medium4.8	—	0.4%	Nov 14, 2023
10Monitor	CVE-2022-4109No exploit	Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Downloadcedcommerce · wholesale market for woocommerce · CWE-22 Path traversal	Low2.7	—	0.7%	Jan 2, 2023

CVE-2022-4298
40Plan
Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Path traversal
cedcommerce · wholesale marketJan 2, 2023
CVE-2022-4106
30Monitor
Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
cedcommerce · wholesale market for woocommerceDec 19, 2022
CVE-2022-4107
26Monitor
SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
cedcommerce · smsa shipping for woocommerceDec 19, 2022
CVE-2022-4363
26Monitor
Wholesale Market <= 2.2.2 - Settings Update via CSRF
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
cedcommerce · wholesale marketMay 16, 2025
CVE-2024-5641
21Monitor
One Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- Broken access control (IDOR)
- XSS
cedcommerce · one click order re-orderJul 4, 2024
CVE-2022-4108
19Monitor
Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download
MediumCVSS 4.9No exploitEPSS 1%
cedcommerce · wholesale market for woocommerceDec 19, 2022
CVE-2023-47646
19Monitor
WordPress Recently viewed and most viewed products Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
cedcommerce · recently viewed and most viewed productsNov 14, 2023
CVE-2022-4109
10Monitor
Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download
LowCVSS 2.7No exploitEPSS 1%
- Path traversal
cedcommerce · wholesale market for woocommerceJan 2, 2023