Serial Codes Generator And Validator Vulnerabilities

The Serial Codes Generator and Validator with WooCommerce Support plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.8.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an u...

CVSS:

4.3

Affected:

up to 2.8.2

Fixed in:

2.8.3

Disclosed:

Dec 31, 2025

CVE-2025-62091 on NVD →

The Serial Codes Generator and Validator with WooCommerce Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.7. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthori...

CVSS:

4.3

Affected:

up to 2.7.7

Fixed in:

2.7.8

Disclosed:

Mar 27, 2025

CVE-2025-30854 on NVD →

The Serial Codes Generator and Validator with WooCommerce Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data[codes]' parameter saved through the sngmbhSerialcodesValidator_executeAdminSettings AJAX action in versions up to, and including, 2.4.14 due to insufficient input sanitizatio...

CVSS:

6.4

Affected:

up to 2.4.15

Fixed in:

2.4.15

Disclosed:

Aug 17, 2023

CVE-2023-4376 on NVD →