Cedcommerce Wholesale Market vulnerabilities
2 known vulnerabilities affecting cedcommerce/wholesale_market.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2022-4298P2CRITICALCVSS 9.8fixed in 2.2.12023-01-02
CVE-2022-4298 [CRITICAL] CWE-22 CVE-2022-4298: The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as doe
The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.
nvd
CVE-2022-4363P4MEDIUMCVSS 6.5fixed in 2.2.22025-05-16
CVE-2022-4363 [MEDIUM] CWE-352 CVE-2022-4363: The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugi
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack
nvd