Woo Product Gallery Slider Vulnerabilities

The Product Gallery Slider for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.8. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted the...

CVSS:

4.3

Affected:

up to 2.2.9

Fixed in:

2.2.9

Disclosed:

May 25, 2023

CVE-2022-45372 on NVD →

The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with subscriber-level permissio...

CVSS:

4.3

Affected:

up to 2.2.6

Fixed in:

2.2.7

Disclosed:

Dec 16, 2022

The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to invoke this function inten...

CVSS:

4.3

Affected:

up to 2.2.6

Fixed in:

2.2.7

Disclosed:

Dec 14, 2022

CVE-2022-47150 on NVD →