Approved changes feed: RSS · Atom

cpe:2.3:a:wpclever:wpc_badge_management_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpclever (c57d919d-58d9-59c4-b847-aa59b14dc3fa)
ProductWpc Badge Management For Woocommerce (2dab39d4-71d0-5646-886c-bcefc0376079)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14767 vulnerable 2026-06-03 14:58:55.930560 WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute
MEDIUM (5.5)
The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcbm_best_seller` shortcode in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-05-13T07:44:11.059Z
Updated: 2026-05-13T10:20:27.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30537 vulnerable 2026-06-03 14:55:38.555324 WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce.This issue affects WPC Badge Management for WooCommerce: from n/a through 2.4.0.
Published: 2024-06-09T09:01:58.058Z
Updated: 2026-04-28T16:09:26.279Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.