Vulnerabilities > Rednao

DATE CVE VULNERABILITY TITLE RISK
2023-11-18 CVE-2023-47551 Cross-Site Request Forgery (CSRF) vulnerability in Rednao Donations Made Easy - Smart Donations
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
network
low complexity
rednao CWE-352
8.8
2023-11-14 CVE-2023-47550 Cross-Site Request Forgery (CSRF) vulnerability in Rednao Donations Made Easy - Smart Donations
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
network
low complexity
rednao CWE-352
6.1
2023-11-06 CVE-2023-40207 SQL Injection vulnerability in Rednao Donations Made Easy - Smart Donations
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
network
low complexity
rednao CWE-89
critical
9.8
2023-10-26 CVE-2023-46076 Cross-site Scripting vulnerability in Rednao Woocommerce PDF Invoice Builder
Unauth.
network
low complexity
rednao CWE-79
6.1
2023-09-27 CVE-2023-40664 Cross-site Scripting vulnerability in Rednao Smart Donations
Unauth.
network
low complexity
rednao CWE-79
6.1
2023-08-31 CVE-2023-3677 Unspecified vulnerability in Rednao Woocommerce PDF Invoice Builder
The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and including, 1.2.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
rednao
8.8
2023-08-31 CVE-2023-3764 Unspecified vulnerability in Rednao Woocommerce PDF Invoice Builder
The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.90.
network
low complexity
rednao
4.3
2023-08-31 CVE-2023-4160 Unspecified vulnerability in Rednao Woocommerce PDF Invoice Builder
The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping.
network
low complexity
rednao
4.8
2023-08-31 CVE-2023-4161 Unspecified vulnerability in Rednao Woocommerce PDF Invoice Builder
The WooCommerce PDF Invoice Builder for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the SaveCustomField function in versions up to, and including, 1.2.90.
network
low complexity
rednao
4.3
2023-08-31 CVE-2023-4245 Unspecified vulnerability in Rednao Woocommerce PDF Invoice Builder
The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to, and including, 1.2.89.
network
low complexity
rednao
4.3