iThemelandCo vulnerabilities
We track 2 vulnerabilities in iThemelandCo products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2024.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest iThemelandCo vulnerabilities
- 8.8 High severity
REPORTiT – Advanced Reporting for WooCommerce: Cross-Site Request Forgery
The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthent
- 7.1 High severity
WooCommerce Report: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iThemelandCo WooCommerce Report allows Reflected XSS.This issue affects WooCommerce Report: from n/a through 1.4.5.