Product Enquiry For Woocommerce (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-13. Vendor: Unknown.

CVEs of Product Enquiry For Woocommerce

• CVE-2024-3964 - CVSS 5.9 (medium), 2024-07-13: The Product Enquiry for WooCommerce WordPress plugin before 3.1.8 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2023-6626 - CVSS 4.8 (medium), 2024-01-22: The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2023-6625 - CVSS 4.3 (medium), 2024-01-22: The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not have a CSRF check in place when deleting inquiries, which could allow attackers to…
• CVE-2023-7151 - CVSS 6.1 (medium), 2024-01-16: The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute,…