Piwebsolution vulnerabilities
We track 2 vulnerabilities in Piwebsolution products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Piwebsolution vulnerabilities
- 8.8 High severity
PiWeb Product Enquiry or product catalog for…: Deserialization of Untrusted Data
The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.33.32 via deserialization of untrusted input in enquiry_detail.php. This makes it possible for
- 8.8 High severity
Conditional shipping & Advanced Flat rate…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <= 1.6.4.4 versions.