VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CriticalHighMediumLowExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

piwebsolutionoracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

piwebsolution products

product enquiry for woocommerce 2add-to-cart-direct-checkout-for-woocommerce 1advanced-free-flat-shipping-woocommerce 1cancel order request / return order / repeat order / reorder for woocommerce 1conditional cart fee / extra charge rule for woocommerce extra fees 1css js manager, async javascript, defer render blocking css supports woocommerce 1export customers list csv for woocommerce 1pi-woocommerce-order-date-time-and-type 1

403,511 vulnerabilities · 1,767 actively exploited (CISA KEV)

piwebsolution ✕Clear filters

10 results

ID	Severity	Summary	Published
CVE-2024-8922	HIGH8.8	The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.33.32 via deserialization of untrusted input in enquiry_detail.php. This makes it possible for authenticated attackers, with Author-level access and above	27/09/2024
CVE-2023-34015	HIGH8.8	Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <= 1.6.4.4 versions.	11/07/2023
CVE-2023-29423	MEDIUM4.8	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <= 1.3.2 versions.