Skip to content
OpenAdvisories

Vendor

rajeshsingh520

3 known vulnerabilities.

Products

PiWeb Live sales notification for WooCommerce 1 PiWeb Product Enquiry or product catalog for WooCommerce 1 Store credit / Gift cards for woocommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-12955

    Live sales notification for WooCommerce <= 2.3.39 - Missing Authorization to Unauthenticated Customer Data Exposure

    The Live sales notification for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.3.39. This is due to the "getOrders" function lacking proper authorization and capability checks when the plugin is…

    rajeshsingh520 PiWeb Live sales notification for WooCommerce Web / CMS
  • High 8.8
    CVE-2024-8922

    Product Enquiry for WooCommerce <= 2.2.33.33 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php

    The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.33.32 via deserialization of untrusted input in enquiry_detail.php. This makes it possible fo…

    rajeshsingh520 PiWeb Product Enquiry or product catalog for WooCommerce Web / CMS