wpwebelite records

18 published records for vendor wpwebelite.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 61.1%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-54383Proof of concept	WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerabilitywpwebelite · woocommerce pdf vouchers · CWE-266 Pre-auth	Critical9.8	—	1.1%	Dec 18, 2024
39Monitor	CVE-2024-5871No exploit	WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injectionwpwebelite · woocommerce social login · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.6%	Jun 15, 2024
39Monitor	CVE-2024-7503No exploit	WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeoverwpwebelite · woocommerce social login · CWE-288 Pre-auth Auth bypass	Critical9.8	—	0.6%	Aug 12, 2024
39Monitor	CVE-2024-43132No exploit	WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerabilitywpwebelite · docket · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Aug 29, 2024
39Monitor	CVE-2024-6636No exploit	WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalationwpwebelite · woocommerce social login · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Jul 20, 2024
39Monitor	CVE-2024-39650No exploit	WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilitieswpwebelite · woocommerce pdf vouchers · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Nov 1, 2024
37Monitor	CVE-2024-39651No exploit	WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerabilitywpwebelite · woocommerce pdf vouchers · CWE-22 Pre-auth Path traversal	Critical9.3	—	0.4%	Aug 13, 2024
35Monitor	CVE-2025-39472No exploit	WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerabilitywpwebelite · woocommerce social login · CWE-352 Pre-auth CSRF	High8.8	—	0.1%	Apr 16, 2025
32Monitor	CVE-2024-10114No exploit	Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth providerwpwebelite · woocommerce social login · CWE-287 Pre-auth Auth bypass	High8.1	—	0.5%	Nov 5, 2024
30Monitor	CVE-2024-43131No exploit	WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerabilitywpwebelite · docket · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 13, 2024
30Monitor	CVE-2025-64258No exploit	WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerabilitywpwebelite · follow my blog post · CWE-497 Pre-auth Info leak	High7.5	—	0.3%	Dec 18, 2025
30Monitor	CVE-2024-37502No exploit	WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerabilitywpwebelite · woocommerce social login · CWE-502 Pre-auth Deserialization	High7.5	—	0.3%	Jul 9, 2024
30Monitor	CVE-2025-68547No exploit	WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerabilitywpwebelite · follow my blog post · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Jan 5, 2026
29Monitor	CVE-2024-6635No exploit	WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypasswpwebelite · woocommerce social login · CWE-288 Pre-auth Auth bypass	High7.3	—	0.4%	Jul 20, 2024
29Monitor	CVE-2024-6637No exploit	WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Passwordwpwebelite · woocommerce social login · CWE-305 Pre-auth Auth bypass	High7.3	—	0.3%	Jul 20, 2024
24Monitor	CVE-2024-39652No exploit	WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilitywpwebelite · woocommerce pdf vouchers · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Aug 1, 2024
24Monitor	CVE-2024-56265No exploit	WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerabilitywpwebelite · woocommerce pdf vouchers · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Dec 31, 2024
21Monitor	CVE-2024-5868No exploit	WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomnesswpwebelite · woocommerce social login · CWE-330 Pre-auth Weak crypto	Medium5.3	—	0.3%	Jun 15, 2024

CVE-2024-54383
39Monitor
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
wpwebelite · woocommerce pdf vouchersDec 18, 2024
CVE-2024-5871
39Monitor
WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
wpwebelite · woocommerce social loginJun 15, 2024
CVE-2024-7503
39Monitor
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
wpwebelite · woocommerce social loginAug 12, 2024
CVE-2024-43132
39Monitor
WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
wpwebelite · docketAug 29, 2024
CVE-2024-6636
39Monitor
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpwebelite · woocommerce social loginJul 20, 2024
CVE-2024-39650
39Monitor
WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpwebelite · woocommerce pdf vouchersNov 1, 2024
CVE-2024-39651
37Monitor
WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Path traversal
wpwebelite · woocommerce pdf vouchersAug 13, 2024
CVE-2025-39472
35Monitor
WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
wpwebelite · woocommerce social loginApr 16, 2025
CVE-2024-10114
32Monitor
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
wpwebelite · woocommerce social loginNov 5, 2024
CVE-2024-43131
30Monitor
WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpwebelite · docketAug 13, 2024
CVE-2025-64258
30Monitor
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
wpwebelite · follow my blog postDec 18, 2025
CVE-2024-37502
30Monitor
WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
wpwebelite · woocommerce social loginJul 9, 2024
CVE-2025-68547
30Monitor
WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wpwebelite · follow my blog postJan 5, 2026
CVE-2024-6635
29Monitor
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
wpwebelite · woocommerce social loginJul 20, 2024
CVE-2024-6637
29Monitor
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
wpwebelite · woocommerce social loginJul 20, 2024
CVE-2024-39652
24Monitor
WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
wpwebelite · woocommerce pdf vouchersAug 1, 2024
CVE-2024-56265
24Monitor
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
wpwebelite · woocommerce pdf vouchersDec 31, 2024
CVE-2024-5868
21Monitor
WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
wpwebelite · woocommerce social loginJun 15, 2024