Vulnerabilities (CVE)

Filtered by vendor Wphive Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-47512 1 Wphive 1 Product Enquiry For Woocommerce 2024-11-21 N/A 7.1 HIGH
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions.
CVE-2021-24211 1 Wphive 1 Wordpress Related Posts 2024-11-21 3.5 LOW 5.4 MEDIUM
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.