Cristiano Zanca vulnerabilities
We track 2 vulnerabilities in Cristiano Zanca products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.
2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score
Latest Cristiano Zanca vulnerabilities
- 7.1 High severity
WooCommerce Booking Bundle Hours: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. This issue affects WooCommerce Booking Bundle Hours: from n/a through 0.7.4.
- 7.1 High severity
WooCommerce Fattureincloud: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristiano Zanca WooCommerce Fattureincloud woo-fattureincloud allows Reflected XSS.This issue affects WooCommerce Fattureincloud: from n/a through <= 2.6.7.