Vulnerabilities (CVE)

Filtered by vendor Woocommerce Subscribe
Filtered by product Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-18834 1 Woocommerce 1 Subscriptions 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.