Extension WordPress
Vulnérabilités Live Sales Notification for Woocommerce – Woomotiv
Cette page rassemble les failles publiées pour Live Sales Notification for Woocommerce – Woomotiv, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Live Sales Notification for Woocommerce – Woomotiv
3 fiches
Live Sales Notification for Woocommerce – Woomotiv <= 3.6.3 – Reflected Cross-Site Scripting
The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'woomotiv_limit' parameter in all versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping. This…
*-3.6.3
Non indiqué
05/12/2025
Woomotiv <= 3.6.1 – Unauthenticated SQL Injection
The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and…
*-3.6.1
3.6.3
06/01/2025
Live Sales Notification for Woocommerce – Woomotiv <= 3.4.3 – Cross-Site Request Forgery via ajax_cancel_review
The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.3. This is due to missing or incorrect nonce validation on the 'ajax_cancel_review' function.…
*-3.4.3
3.5
19/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.