Vulnerability history

Authenticated (Administrator+) Arbitrary Function Execution vulnerability

Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Authenticated (Administrator+) SQL Injection vulnerability

All-in-One WooCommerce Growth & Store Enhancement Plugin plugin <= 3.3.8 - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute vulnerability

Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Unauthenticated Local PHP File Inclusion via 'load_template' vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Cross Site Scripting (XSS) Vulnerability

Unauthenticated Server-Side Request Forgery via URL Parameter vulnerability

Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module vulnerability

Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode vulnerability

Missing Authorization to WordPress Option Modification vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization via purchased_new_products vulnerability

Authenticated (contributor+) Stored Cross-Site Scripting via _id vulnerability

Improper Authorization via woolentor_template_store vulnerability

Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link vulnerability

Cross Site Request Forgery (CSRF) vulnerability

CSRF Leading to Plugin Settings Change Vulnerability

Contributor+ Stored XSS Vulnerability

PHP Object Injection Vulnerability

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities