Waitlist Woocommerce vulnerabilities
2 known vulnerabilities in Waitlist Woocommerce from XootiX. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Waitlist Woocommerce ( Back in stock notifier ): Incorrect Authorization
Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with
- 8.8 High severity
Login/Signup Popup: Cross-Site Request Forgery
The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings function found in the ~/includes/xoo-framework/admin/class-