wiloke vulnerabilities

Products

• myshopkit 1
• myshopkit-popup-smartbar-slidein 1
• WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit 1
• Your Journey 1

Latest wiloke CVEs

Newest publication first

1. CVE-2024-1436 WordPress WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Plugin <= 1.0.9 is vulnerable to Sensitive Data Exposure

   Published 2024-02-26

   Medium·CVSS 5.3 EPSS 0.44%

   Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9.

2. CVE-2023-3933 Your Journey <= 1.9.8 - Prototype Pollution to Reflected Cross-Site Scripting

   Published 2023-10-20

   Medium·CVSS 6.1 EPSS 0.45%

   The Your Journey theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.