Advisories · Technology
Infused Addons InfusedWoo Pro.
Every CVE that names Infused Addons InfusedWoo Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
InfusedWoo Pro <= 5.1.18 - Authenticated (Subscriber+) Privilege Escalation via Password Reset Link Disclosure
- Infused Addons InfusedWoo Pro
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters
- Infused Addons InfusedWoo Pro
- Broken access control
- CVSS 7.5 High
InfusedWoo Pro <= 5.1.2 - Unauthenticated Arbitrary File Read via 'url' Parameter
- Infused Addons InfusedWoo Pro
- Server-side request forgery (SSRF)
- CVSS 8.8 High
InfusedWoo Pro <= 5.1.2 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary User Meta Update
- Infused Addons InfusedWoo Pro
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Privilege Escalation via 'iwar_save_recipe'
- Infused Addons InfusedWoo Pro
- Broken access control