Skip to content
OpenAdvisories

Vendor

fullservices

5 known vulnerabilities.

Products

FULL – Cliente 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-6447

    FULL <= 3.1.12 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter

    The FULL – Cliente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the license plan parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping as well as missing authorization and ca…

    fullservices FULL – Cliente Web / CMS
  • High 8.8
    CVE-2023-4243

    FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation

    The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and…

    fullservices FULL – Cliente Web / CMS