Skip to content
OpenAdvisories

Vendor

Etoile Web Design

10 known vulnerabilities.

Products

Five Star Restaurant Reservations 3 Front End Users 2 Ultimate Product Catalogue 2 Order Tracking 1 Ultimate Product Catalog 1 Ultimate Reviews 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47924

    WordPress Plugin Ultimate Product Catalogue 5.8.2 Stored XSS via price

    Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in …

    Etoile Web Design Ultimate Product Catalogue Web / CMS
  • Medium 4.3
    CVE-2024-43343

    WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12.

    Etoile Web Design Order Tracking
  • Medium 4.3
    CVE-2024-31921

    WordPress Ultimate Product Catalog plugin <= 5.2.15 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Etoile Web Design Ultimate Product Catalogue.This issue affects Ultimate Product Catalogue: from n/a through 5.2.15.

    Etoile Web Design Ultimate Product Catalogue
  • Medium 6.5
    CVE-2023-34005

    WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Etoile Web Design Front End Users plugin <= 3.2.24 versions.

    Etoile Web Design Front End Users