wedevs Vulnerabilities and Affected Products
Vulnerabilities associated with Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.
Products
Clear product- Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker11 vulnerabilities
- WP User Frontend9 vulnerabilities
- ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support8 vulnerabilities
- WP ERP8 vulnerabilities
- WP Project Manager7 vulnerabilities
- Dokan Pro6 vulnerabilities
- weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot6 vulnerabilities
- User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration5 vulnerabilities
- weMail4 vulnerabilities
- wp_erp4 vulnerabilities
- ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce3 vulnerabilities
- Happy Addons for Elementor3 vulnerabilities
- StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce3 vulnerabilities
- Subscribe2 – Form, Email Subscribers & Newsletters3 vulnerabilities
- User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration3 vulnerabilities
- WooCommerce Conversion Tracking3 vulnerabilities
- wp_project_manager3 vulnerabilities
- Appsero Helper2 vulnerabilities
- Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy2 vulnerabilities
- ReCaptcha Integration for WordPress2 vulnerabilities
- weDocs2 vulnerabilities
- weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce2 vulnerabilities
- woocommerce_conversion_tracking2 vulnerabilities
- WP User Frontend Pro2 vulnerabilities
- wp_user_frontend2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-26525HIGH | WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.12. CWE-89Dec 20, 2023 | CVSS7.1v3.1 | EPSS0.57% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-34382MEDIUM | WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object InjectionDeserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.19. CWE-502Dec 19, 2023 | CVSS4.4v3.1 | EPSS0.689% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |