Skip to content
OpenAdvisories

Vendor

marcoingraiti

3 known vulnerabilities.

Products

Actionwear products sync 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-49350

    WordPress Actionwear products sync plugin <= 2.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through <= 2.3.3.

    marcoingraiti Actionwear products sync
  • Medium 5.3
    CVE-2024-13535

    Actionwear products sync <= 2.3.2 - Unauthenticated Full Patch Disclosure

    The Actionwear products sync plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.3.2. This is due the composer-setup.php file being publicly accessible with 'display_errors' set to true. This makes it possible fo…

    marcoingraiti Actionwear products sync Web / CMS