plugin

Woo Vipps Vulnerabilities

2 known security issues reported for the Woo Vipps WordPress plugin. Most recent disclosed Feb 10, 2024.

1 medium

Running Woo Vipps on your site? Check whether your installed version is affected.

Scan your site free

Pay with Vipps and MobilePay for WooCommerce [woo-vipps] < 1.14.14

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hosting Pay with Vipps and MobilePay for WooCommerce allows Stored XSS.This issue affects Pay with Vipps and MobilePay for WooCommerce: from n/a through 1.14.13.

Affected:
up to 1.14.14
Fixed in:
1.14.14
Disclosed:
Feb 10, 2024

CVE-2023-51485 on NVD →

Pay with Vipps for WooCommerce <= 1.14.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

medium

The Pay with Vipps for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the buy now button in versions up to, and including, 1.14.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, t...

CVSS:
6.4
Affected:
up to 1.14.13
Fixed in:
1.14.14
Disclosed:
Dec 27, 2023

CVE-2023-51485 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database