plugin

Stock In Vulnerabilities

2 known security issues reported for the Stock In WordPress plugin. Most recent disclosed Jun 2, 2021.

1 high 1 medium

Running Stock In on your site? Check whether your installed version is affected.

Scan your site free

Stock in & out <= 1.0.4 - SQL Injection

high

The Stock in & out WordPress plugin for WordPress is vulnerable to SQL Injection via the product_id parameter in versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attack...

CVSS:
8.8
Affected:
up to 1.0.4
Fix:
No patched version reported
Disclosed:
Jun 2, 2021

CVE-2021-24520 on NVD →

Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting

medium

The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue

CVSS:
5.4
Affected:
up to 1.0.4
Fix:
No patched version reported
Disclosed:
May 27, 2021

CVE-2021-24346 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database