ioannup vulnerabilities

Products

• Edit WooCommerce Templates 2
• Code Generate 1

Latest ioannup CVEs

Newest publication first

1. CVE-2024-49646 WordPress Code Generate plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

   Published 2024-10-29

   High·CVSS 7.1 EPSS 0.30%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ioannup Code Generate code-generator allows Reflected XSS.This issue affects Code Generate: from n/a through <= 1.0.

2. CVE-2024-10049 Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page

   Published 2024-10-18

   Medium·CVSS 6.1 EPSS 0.34%

   The Edit WooCommerce Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

3. CVE-2023-47509 WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-11-16

   Medium·CVSS 6.1 EPSS 0.41%

   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ioannup Edit WooCommerce Templates plugin <= 1.1.1 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.