Vulnerabilities (CVE)

Filtered by vendor Villatheme Subscribe
Filtered by product Orders Tracking For Woocommerce
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25062 1 Villatheme 1 Orders Tracking For Woocommerce 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting