PI Websolution vulnerabilities

9 vulnerabilities

Known vulnerabilities in PI Websolution products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.

Products

8
8.8CVE-2022-47154pi websolutioncss js manager, async javascript, defer render blocking css supports woocommerce+2
EPSS score
0.26%
Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin <= 2.4.49 versions.
5.9CVE-2023-29170pi websolutionproduct enquiry for woocommerce, woocommerce product catalog+2
EPSS score
0.37%
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions.
5.9CVE-2023-29093pi websolutionconditional cart fee+2
EPSS score
0.37%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PI Websolution Conditional cart fee plugin <= 1.0.96 versions.
5.9CVE-2023-29094pi websolutionproduct page shipping calculator for woocommerce+2
EPSS score
0.37%
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.20 versions.
5.9CVE-2023-29423pi websolutioncancel order request / return order / repeat order / reorder for woocommerce+2
EPSS score
0.37%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <= 1.3.2 versions.
5.9CVE-2023-28988pi websolutiondirect checkout, add to cart redirect, quick purchase button, buy now button, quick view button for woocommerce+2
EPSS score
0.37%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin <= 2.1.48 versions.
5.9CVE-2023-28991pi websolutionorder date, order pickup, order date time, pickup location, delivery date for woocommerce+2
EPSS score
0.37%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin <= 3.0.19 versions.
5.9CVE-2023-32575pi websolutionproduct page shipping calculator for woocommerce+2
EPSS score
0.40%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions.
8.8CVE-2023-34015pi websolutionconditional shipping & advanced flat rate shipping rates / flexible shipping for woocommerce shipping+2
EPSS score
0.25%
Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <= 1.6.4.4 versions.