Skip to content
OpenAdvisories

Vendor

ithemelandco

5 known vulnerabilities.

Products

WPBULKiT – Bulk Edit WordPress Posts & Pages 2 WooCommerce Report 1 GIFTiT – Free Gifts for WooCommerce 1 REPORTiT – Advanced Reporting for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-10711

    WooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Update

    The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthen…

    ithemelandco REPORTiT – Advanced Reporting for WooCommerce Web / CMS
  • High 7.1
    CVE-2024-38683

    WordPress WooCommerce Report plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iThemelandCo WooCommerce Report allows Reflected XSS.This issue affects WooCommerce Report: from n/a through 1.4.5.

    ithemelandco WooCommerce Report Web / CMS