Skip to content
Noroxi

wpclever records

12 published records for vendor wpclever.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
50%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2024-10436
    35Monitor

    WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion

    HighCVSS 8.8No exploitEPSS 1%

    wpclever · wpc smart messages for woocommerceOct 29, 2024

  • CVE-2024-50416
    35Monitor

    WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    wpclever · wpc shop as a customer for woocommerceOct 28, 2024

  • CVE-2024-43312
    35Monitor

    WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    wpclever · wpc frequently bought together for woocommerceNov 1, 2024

  • CVE-2024-30537
    35Monitor

    WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    wpclever · wpc badge management for woocommerceJun 9, 2024

  • CVE-2023-34386
    35Monitor

    WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wpclever · wpc smart wishlist for woocommerceNov 9, 2023

  • CVE-2023-52127
    35Monitor

    WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wpclever · wpc product bundles for woocommerceJan 5, 2024

  • CVE-2024-2838
    25Monitor

    WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    wpclever · wpc composite products for woocommerceApr 27, 2024

  • CVE-2022-1465
    24Monitor

    WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    wpclever · wpc smart wishlist for woocommerceMay 16, 2022

  • CVE-2022-0397
    21Monitor

    WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    wpclever · wpc smart wishlist for woocommerceMar 28, 2022

  • CVE-2025-5530
    21Monitor

    WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    wpclever · wpc smart compare for woocommerceJul 11, 2025

  • CVE-2024-32687
    17Monitor

    WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    wpclever · wpc frequently bought together for woocommerceApr 22, 2024

  • CVE-2023-6494
    17Monitor

    WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

    MediumCVSS 4.4No exploitEPSS 0%

    wpclever · wpc smart quick view for woocommerceApr 13, 2024