{"items":[{"id":"CVE-2026-118757","published":"2026-10-28T21:11:24.955Z","updated":"2026-11-03T00:03:00.604Z","title":"PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_fees","severity":"MEDIUM","score":6.9,"vendor":"PI Websolution","product":"PiWeb Disable payment method / Partial payment for WooCommerce","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2023-32575","published":"2023-08-25T10:28:38.710Z","updated":"2026-04-28T16:08:23.469Z","title":"WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.25 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Product page shipping calculator for WooCommerce","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2023-34015","published":"2023-07-11T08:36:04.177Z","updated":"2026-04-28T16:08:27.031Z","title":"WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":5.4,"vendor":"PI Websolution","product":"Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping","kev":false,"epss":0.00248,"kevAdded":null},{"id":"CVE-2023-29423","published":"2023-06-26T07:13:11.884Z","updated":"2026-04-28T16:08:17.860Z","title":"WordPress Cancel order request WooCommerce Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Cancel order request / Return order / Repeat Order / Reorder for WooCommerce","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2023-29093","published":"2023-06-26T05:33:47.271Z","updated":"2026-04-28T16:08:17.413Z","title":"WordPress Conditional extra fees for woocommerce Plugin <= 1.0.96 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Conditional cart fee","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2023-28991","published":"2023-06-26T05:27:18.323Z","updated":"2026-04-28T16:08:17.168Z","title":"WordPress Order date time for WooCommerce Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2023-28988","published":"2023-06-26T05:05:12.321Z","updated":"2026-04-28T16:08:17.088Z","title":"WordPress Direct checkout, Add to cart redirect for Woocommerce Plugin <= 2.1.48 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2023-29170","published":"2023-04-07T14:35:55.043Z","updated":"2026-04-28T16:08:17.370Z","title":"WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Product Enquiry for WooCommerce, WooCommerce product catalog","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2023-29094","published":"2023-04-07T12:59:29.606Z","updated":"2026-04-28T16:08:17.353Z","title":"WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"PI Websolution","product":"Product page shipping calculator for WooCommerce","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2022-47154","published":"2023-03-14T07:11:40.511Z","updated":"2026-04-28T16:07:56.692Z","title":"WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"Pi Websolution","product":"CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce","kev":false,"epss":0.0026,"kevAdded":null}]}