CVE-2023-4376

MOYENNE 4.8CVE-2023-4376 · Published 19/09/2023 · updated 17/06/2026

En bref

CVE-2023-4376 est une vulnérabilité MOYENNE (CVSS 4.8) touchant serial codes generator and validator with woocommerce support (nikolov).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.47%, plus élevée que 41.3% des vulnérabilités.
Correctif : mettre à jour vers 2.4.15 ou plus récent.

Package	Affected versions	Patched versions
serial codes generator and validator with woocommerce support nikolov	`< 2.4.15`	`2.4.15`

Description

The Serial Codes Generator and Validator with WooCommerce Support WordPress plugin before 2.4.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

References

wpscan.com/vulnerability/13910e52-5302-4252-8bee-49dd1f0e180a · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free