Skip to content
OpenAdvisories

Vendor

prasidhda

2 known vulnerabilities.

Products

Woo Manage Fraud Orders 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-10544

    Woo Manage Fraud Orders <= 2.6.1 - Unauthenticated Information Exposure via Log Files

    The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive…

    prasidhda Woo Manage Fraud Orders Web / CMS
  • Medium 6.1
    CVE-2024-9937

    Woo Manage Fraud Orders <= 2.6.1 - Reflected Cross-Site Scripting

    The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauth…

    prasidhda Woo Manage Fraud Orders Web / CMS