RedNao vulnerabilities
We track 5 vulnerabilities in RedNao products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2024.
Latest RedNao vulnerabilities
- 8.8 High severity
Donations Made Easy – Smart Donations: Missing Authorization
Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
- 8.8 High severity
WooCommerce PDF Invoice Builder: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in RedNao WooCommerce PDF Invoice Builder.This issue affects WooCommerce PDF Invoice Builder: from n/a through 1.2.101.
- 8.8 High severity
Donations Made Easy – Smart Donations: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
- 9.8 Critical severity
Donations Made Easy – Smart Donations: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
- 8.8 High severity
PDF Builder for WooCommerce. Create…: Improper Neutralization of Special Elements used in an SQL Command
The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and including, 1.2.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis