Advisories · Technology
wpclever WPC Shop as a Customer for WooCommerce.
Every CVE that names wpclever WPC Shop as a Customer for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint
- wpclever WPC Shop as a Customer for WooCommerce
- Privilege escalation
- CVSS 8.1 High
WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key
- wpclever WPC Shop as a Customer for WooCommerce
- Weak cryptography or TLS
- CVSS 8.8 High
WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability
- WPClever WPC Shop as a Customer for WooCommerce
- Insecure deserialization