Stock Exporter For Woocommerce Vulnerabilities

The Stock Exporter for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

CVSS:

6.1

Affected:

up to 1.1.0

Fixed in:

1.2.0

Disclosed:

Apr 19, 2023

CVE-2023-30871 on NVD →

The Stock Exporter for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.0. This is due to missing nonce validation on the woocommerce_stock_exporter_page_process() function. This makes it possible for unauthenticated attackers to update the woocoomerce_s...

CVSS:

4.3

Affected:

up to 1.1.0

Fixed in:

1.2.0

Disclosed:

Apr 13, 2023