Search Results (42 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-1037 1 Villatheme 1 Exmage 2024-11-21 7.2 High
The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs
CVE-2021-25062 1 Villatheme 1 Orders Tracking For Woocommerce 2024-11-21 6.1 Medium
The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting