mihail-barinov

Products

Exploited and recent CVEs

  • CVE-2026-12241 Medium 5.4 Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2026-15662 Medium 6.4 Advanced Woo Labels <= 2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter 0.4%
  • CVE-2026-1929 High 8.8 Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter 0.6%
  • CVE-2025-2302 Medium 6.4 Advanced Woo Search <= 3.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode 0.3%
  • CVE-2024-8761 High 7.2 Share This Image <= 2.03 - Open Redirect via link Parameter 0.5%
  • CVE-2024-8363 Medium 6.4 Share This Image <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode 0.4%
  • CVE-2024-8108 Medium 6.4 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter 0.4%
  • CVE-2024-0251 Medium 6.1 Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting 0.5%
  • CVE-2023-2452 Medium 4.4 Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting 0.5%