Skip to content
OpenAdvisories

Vendor

ankitpokhrel

2 known vulnerabilities.

Products

WooCommerce Multiple Free Gift 1 Dynamic Featured Image 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-3459

    WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding

    The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the products that can be added as a gift. This makes it possible …

    ankitpokhrel WooCommerce Multiple Free Gift Web / CMS
  • Medium 6.4
    CVE-2024-6929

    Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter

    The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for aut…

    ankitpokhrel Dynamic Featured Image Web / CMS