Skip to content
OpenAdvisories

Vendor

a3rev

8 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1

    Page View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8.0 to 2.8.4. This makes it possible for…

  • High 8.1

    Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection

    The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated a…