Skip to content
OpenAdvisories

Vendor

homescript

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection

    The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.1 via the 'Export Utility' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add…