Skip to content
OpenAdvisories

Vendor

XforWooCommerce

5 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.2

    WordPress Product Filter for WooCommerce plugin <= 9.1.2 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through <= 9.1.2.

  • High 8.8

    WordPress XforWooCommerce plugin <= 2.0.2 - Authenticated Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in XforWooCommerce allows PHP Local File Inclusion.This issue affects XforWooCommerce: from n/a through 2.0.2.

  • High 8.8

    Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization

    Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wp_ajax_svx_ajax_factory function in various versions listed below. This makes it possible for authenticated attackers, with s…