Unknown Product Addons & Fields For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Product Addons & Fields For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2023-2256themeisleproduct_addons_\&_fields_for_woocommerce+2
EPSS score
0.95%
The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.4.8CVE-2023-1839themeisleproduct_addons_\&_fields_for_woocommerce+2
EPSS score
0.46%
The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.6 does not sanitize and escape some of its setting fields, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).