Approved changes feed: RSS · Atom

cpe:2.3:a:weboccult_technologies_pvt_ltd:email_attachment_by_order_status_&_products:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWeboccult Technologies Pvt Ltd (53f2bb84-f421-5e23-8cfd-6ef98ef6b791)
ProductEmail Attachment By Order Status & Products (71cd9947-8070-5f03-ae20-06ba6fbb5c04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49957 vulnerable 2026-06-08 07:29:15.157448 WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status & Products: from n/a through <= 1.0.1.
Published: 2025-10-22T14:32:20.403Z
Updated: 2026-04-28T20:28:43.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.