multiparcels records
5 published records for vendor multiparcels.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-2843No exploit | MultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLimultiparcels · multiparcels shipping for woocommerce · CWE-89 | High8.8 | — | 0.9% | Aug 7, 2023 |
32Monitor | CVE-2023-3365No exploit | MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletionmultiparcels · multiparcels shipping for woocommerce · CWE-862 | High8.1 | — | 0.7% | Aug 7, 2023 |
24Monitor | CVE-2023-3671No exploit | MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSSmultiparcels · multiparcels shipping for woocommerce · CWE-79 | Medium6.1 | — | 0.5% | Aug 7, 2023 |
24Monitor | CVE-2023-3954No exploit | MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSSmultiparcels · multiparcels shipping for woocommerce · CWE-79 | Medium6.1 | — | 0.5% | Aug 21, 2023 |
17Monitor | CVE-2023-3366No exploit | MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRFmultiparcels · multiparcels shipping for woocommerce · CWE-352 | Medium4.3 | — | 0.3% | Aug 21, 2023 |
- CVE-2023-284335Monitor
MultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLi
HighCVSS 8.8No exploitEPSS 1%multiparcels · multiparcels shipping for woocommerceAug 7, 2023
- CVE-2023-336532Monitor
MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion
HighCVSS 8.1No exploitEPSS 1%multiparcels · multiparcels shipping for woocommerceAug 7, 2023
- CVE-2023-367124Monitor
MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS
MediumCVSS 6.1No exploitEPSS 0%multiparcels · multiparcels shipping for woocommerceAug 7, 2023
- CVE-2023-395424Monitor
MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS
MediumCVSS 6.1No exploitEPSS 0%multiparcels · multiparcels shipping for woocommerceAug 21, 2023
- CVE-2023-336617Monitor
MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF
MediumCVSS 4.3No exploitEPSS 0%multiparcels · multiparcels shipping for woocommerceAug 21, 2023