Chetan Khandla
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Woocommerce Product Design | 3 | – | Oct 30, 2024 |
| WooCommerce Order Search | 1 | – | Jan 22, 2025 |
Exploited and recent CVEs
- CVE-2025-23495 WordPress WooCommerce Order Search plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-50508 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerability 1.1%
- CVE-2024-50509 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability 1.4%
- CVE-2024-50482 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability 1.1%