Product Category Slider for WooCommerce <= 4.3.4 - Authenticated (Contributor+) Local File Inclusion
high
The Product Category Slider for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.3.4. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any...
- CVSS:
- 8.8
- Affected:
- up to 4.3.4
- Fixed in:
- 4.3.5
- Disclosed:
- May 2, 2025
CVE-2025-39364 on NVD →
Appsero <= 1.2.1 - Missing Authorization
medium
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with subscriber-level permissio...
- CVSS:
- 4.3
- Affected:
- up to 4.1.5
- Fixed in:
- 4.1.6
- Disclosed:
- Dec 16, 2022
Appsero <= 1.2.0 - Cross-Site Request Forgery
medium
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to invoke this function inten...
- CVSS:
- 4.3
- Affected:
- up to 4.1.5
- Fixed in:
- 4.1.6
- Disclosed:
- Dec 14, 2022
CVE-2022-47150 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database