Checkout Mestres WP vulnerabilities

5 known vulnerabilities in Checkout Mestres WP from Mestres do WP. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Checkout Mestres WP: Incorrect Privilege Assignment

  CVE-2025-32695Apr 9, 2025Mestres do WP

  Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through <= 8.7.5.

• 7.2 High severity

  Checkout Mestres WP: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-44030Oct 2, 2024Mestres do WP

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP: from n/a through <= 8.6.

• 9.8 Critical severity

  Checkout Mestres WP: Improper Authentication

  CVE-2023-51472Apr 24, 2024Mestres do WP

  Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7.

• 8.2 High severity

  Checkout Mestres WP: Improper Authentication

  CVE-2023-51471Apr 24, 2024Mestres do WP

  Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7.

• 9.8 Critical severity

  Checkout Mestres WP: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-51469Dec 31, 2023Mestres do WP

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6.