PI Websolution

10 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-118757

  PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_fees

  PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerability in the update_fees AJAX handler that allows unauthenticated attackers to modify and read other customers' orders. Attackers can reuse…

  PI Websolution PiWeb Disable payment method / Partial payment for WooCommerce Web / CMS
  Oct 28, 2026
• Medium 5.9
  CVE-2023-32575

  WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.25 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions.

  PI Websolution Product page shipping calculator for WooCommerce Web / CMS
  Aug 25, 2023
• Medium 5.4
  CVE-2023-34015

  WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <= 1.6.4.4 versions.

  PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping Web / CMS
  Jul 11, 2023
• Medium 5.9
  CVE-2023-29423

  WordPress Cancel order request WooCommerce Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <= 1.3.2 versions.

  PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce Web / CMS
  Jun 26, 2023
• Medium 5.9
  CVE-2023-29093

  WordPress Conditional extra fees for woocommerce Plugin <= 1.0.96 is vulnerable to Cross Site Scripting (XSS)

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PI Websolution Conditional cart fee plugin <= 1.0.96 versions.

  PI Websolution Conditional cart fee
  Jun 26, 2023
• Medium 5.9
  CVE-2023-28991

  WordPress Order date time for WooCommerce Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin <= 3.0.19 versions.

  PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce Web / CMS
  Jun 26, 2023
• Medium 5.9
  CVE-2023-28988

  WordPress Direct checkout, Add to cart redirect for Woocommerce Plugin <= 2.1.48 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin <= 2.1.48 versions.

  PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce Web / CMS
  Jun 26, 2023
• Medium 5.9
  CVE-2023-29170

  WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions.

  PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog Web / CMS
  Apr 7, 2023
• Medium 5.9
  CVE-2023-29094

  WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.20 versions.

  PI Websolution Product page shipping calculator for WooCommerce Web / CMS
  Apr 7, 2023
• Medium 4.3
  CVE-2022-47154

  WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin <= 2.4.49 versions.

  PI Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce Web / CMS
  Mar 14, 2023