Skip to content
OpenAdvisories

Vendor

mihail-barinov

9 known vulnerabilities.

Products

Advanced Woo Labels – Product Labels & Badges for WooCommerce 3 Advanced Woo Search – Product Search for WooCommerce 3 Share This Image 3
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-12241

    Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'save_meta_boxes' function in all versions up to, and including, 2.51…

    mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2026-15662

    Advanced Woo Labels <= 2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter

    The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bg_color' parameter in all versions up to, and including, 2.48 due to insufficient input sanitization and output escap…

    mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2025-2302

    Advanced Woo Search <= 3.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode

    The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aws_search_terms shortcode in all versions up to, and including, 3.28 due to insufficient input sanitization and output escaping on user supplied attrib…

    mihail-barinov Advanced Woo Search – Product Search for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2024-8363

    Share This Image <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode

    The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. Th…

    mihail-barinov Share This Image Web / CMS
  • Medium 6.4
    CVE-2024-8108

    Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

    The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    mihail-barinov Share This Image Web / CMS
  • Medium 6.1
    CVE-2024-0251

    Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting

    The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.96 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…

    mihail-barinov Advanced Woo Search – Product Search for WooCommerce Web / CMS
  • Medium 4.4
    CVE-2023-2452

    Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.77 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

    mihail-barinov Advanced Woo Search – Product Search for WooCommerce Web / CMS