Advisories · Technology

XootiX Side Cart Woocommerce (Ajax).

Every CVE that names XootiX Side Cart Woocommerce (Ajax) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28415 CVE record

CVSS 5.9 Medium

WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
- XootiX Side Cart Woocommerce (Ajax)
- Cross-site scripting (XSS)
Not analysed yet 30 Aug 2023
CVE-2022-45376 CVE record

CVSS 4.3 Medium

WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- XootiX Side Cart Woocommerce (Ajax)
- Cross-site request forgery (CSRF)
Not analysed yet 22 May 2023
CVE-2022-0215 CVE record

CVSS 8.8 High

XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update
- XootiX Login/Signup Popup
- XootiX Waitlist Woocommerce ( Back in stock notifier )
- Cross-site request forgery (CSRF)
Not analysed yet 18 Jan 2022