Skip to content
OpenAdvisories

Vendor

calliko

3 known vulnerabilities.

Products

NPS computy 2 Bonus for Woo 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-58835

    WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through <= 7.6.6.

    calliko Bonus for Woo
  • Medium 6.1
    CVE-2024-11807

    NPS computy <= 2.8.0 - Reflected Cross-Site Scripting

    The NPS computy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'data1' and 'data2' parameters in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping. This makes it possible for unau…

    calliko NPS computy Web / CMS