Gravitymaster - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2024-07-13.

Products

CVE-2024-3964 - CVSS 5.9 (medium), 2024-07-13: The Product Enquiry for WooCommerce WordPress plugin before 3.1.8 does not sanitise and escape some of its settings, which could allow high privilege users…
CVE-2023-6626 - CVSS 4.8 (medium), 2024-01-22: The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not sanitise and escape some of its settings, which could allow high privilege users such…
CVE-2023-6625 - CVSS 4.3 (medium), 2024-01-22: The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not have a CSRF check in place when deleting inquiries, which could allow attackers to…
CVE-2023-7151 - CVSS 6.1 (medium), 2024-01-16: The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute,…
CVE-2023-49761 - CVSS 8.8 (high), 2023-12-18: Cross-Site Request Forgery (CSRF) vulnerability in Gravity Master Product Enquiry for WooCommerce.This issue affects Product Enquiry for WooCommerce: from n/a…
CVE-2023-47512 - CVSS 7.1 (high), 2023-11-16: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions.
CVE-2023-47696 - CVSS 7.1 (high), 2023-11-13: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions.