Approved changes feed: RSS · Atom
cpe:2.3:a:biteship:biteship:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Biteship (d85f0585-951b-52f9-a3c5-64c980447323) |
|---|---|
| Product | Biteship (e40b8a68-9a22-5d66-8321-6fbd38d47fb3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-24866 |
vulnerable | 2026-06-08 06:29:41.933468 |
WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Reflected XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24.
Published: 2024-02-05T06:02:19.427Z
Updated: 2026-04-28T16:09:11.116Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6278 |
vulnerable | 2026-06-08 06:19:46.839033 |
Biteship for WooCommerce < 2.2.25 - Reflected Cross-Site Scripting
The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and escape the biteship_error and biteship_message parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2024-01-29T14:44:14.702Z
Updated: 2025-06-20T19:42:54.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49767 |
vulnerable | 2026-06-08 06:16:10.418198 |
WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Stored XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24.
Published: 2023-12-15T15:19:37.348Z
Updated: 2026-04-28T16:08:57.290Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.