Skip to content
OpenAdvisories

Product · impleCode

eCommerce Product Catalog Plugin for WordPress

7 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset

    The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customer_panel_password_reset' funct…