railmedia
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Order Tip for WooCommerce | 2 | – | Aug 15, 2025 |
Exploited and recent CVEs
- CVE-2025-6025 Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts 0.5%
- CVE-2024-1119 Order Tip for WooCommerce <= 1.3.1 - Missing Authorization to Unauthenticated Data Export 0.5%