Known CVE

WordPress WooCommerce <1.13.22 - Cross-Site Scripting

WordPress WooCommerce before 1.13.22 contains a reflected cross-site scripting vulnerability via the slider import search feature because it does not properly sanitize the keyword GET parameter.

CVE-2021-24300

Medium2021CVSS 6.1CWE-79

cve2021 · xss · wp · wordpress · wp-plugin · authenticated · wpscan · pickplugins

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website