GCVE - cpe:2.3:a:conversios:conversios.io:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:conversios:conversios.io:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Conversios (`3e82ac94-bb8f-5e53-8644-7a0ef64f435b`)
Product	Conversios.Io (`fc2a1f90-e93e-586d-a2f4-f001f83e7025`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-62925`	vulnerable	2026-06-08 07:39:17.029458	WordPress Conversios.io plugin <= 7.2.13 - Broken Access Control vulnerability MEDIUM (5.4) Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through <= 7.2.13. Published: 2025-10-27T01:33:59.236Z Updated: 2026-04-28T16:14:06.183Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/enhanced-e-commerce-for-woocommerce-store/vulnerability/wordpress-conversios-io-plugin-7-2-10-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30909`	vulnerable	2026-06-08 07:17:02.035869	WordPress Conversios.io plugin <= 7.2.3 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through <= 7.2.3. Published: 2025-03-27T10:55:53.123Z Updated: 2026-04-28T16:12:00.369Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/enhanced-e-commerce-for-woocommerce-store/vulnerability/wordpress-conversios-io-plugin-7-2-3-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29794`	vulnerable	2026-06-08 06:33:29.350735	WordPress Conversios.io plugin <= 6.9.1 - Reflected Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Conversios Conversios.Io allows Reflected XSS.This issue affects Conversios.Io: from n/a through 6.9.1. Published: 2024-03-27T12:40:18.533Z Updated: 2026-04-28T16:09:19.068Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/enhanced-e-commerce-for-woocommerce-store/wordpress-conversios-io-plugin-6-9-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51357`	vulnerable	2026-06-08 06:16:17.357332	WordPress Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <= 6.5.0 - Broken Access Control vulnerability MEDIUM (5.3) Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through <= 6.5.0. Published: 2024-12-09T11:29:49.353Z Updated: 2026-04-29T09:51:52.446Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/enhanced-e-commerce-for-woocommerce-store/vulnerability/wordpress-track-google-analytics-4-facebook-pixel-conversions-api-via-google-tag-manager-for-woocommerce-plugin-6-5-0-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.