WooCommerce Report vulnerabilities

2 known vulnerabilities in WooCommerce Report from iThemelandCo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  REPORTiT – Advanced Reporting for WooCommerce: Cross-Site Request Forgery

  CVE-2024-10711Nov 5, 2024iThemelandCo

  The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthent

• 7.1 High severity

  WooCommerce Report: Improper Neutralization of Input During Web Page Generation

  CVE-2024-38683Jul 20, 2024iThemelandCo

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iThemelandCo WooCommerce Report allows Reflected XSS.This issue affects WooCommerce Report: from n/a through 1.4.5.