Anzar Ahmed

Products

Product	CVEs	Exploited	Latest
Ni WooCommerce Cost Of Goods	3	–	Apr 4, 2025
Ni CRM Lead	2	–	Dec 13, 2024
Ni WooCommerce Order Export	1	–	Dec 13, 2024
Ni WooCommerce Product Enquiry	1	–	Apr 1, 2025
Ni WooCommerce Sales Report	1	–	Dec 9, 2024
Display product variations dropdown on shop page	1	–	Apr 4, 2025
Ni WooCommerce Sales Report Email	1	–	Mar 3, 2025
Ni WooCommerce Bulk Product Editor	1	–	Dec 13, 2024

CVE-2025-32226 Medium 4.3 WordPress Display product variations dropdown on shop page plugin <= 1.1.3 - Broken Access Control vulnerability 0.4%
CVE-2025-32207 Medium 6.5 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2025-31580 High 7.5 WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability 0.4%
CVE-2025-31826 Medium 5.4 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability 0.5%
CVE-2025-23481 High 7.1 WordPress Ni WooCommerce Sales Report Email plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-54258 High 8.5 WordPress Ni CRM Lead plugin <= 1.3.0 - SQL Injection vulnerability 0.5%
CVE-2024-54237 High 7.1 WordPress Ni CRM Lead plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2024-54236 High 7.1 WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2024-54231 High 7.1 WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2023-32299 Medium 6.5 WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability 0.5%
CVE-2024-53783 High 7.6 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability 0.5%