4.5.1

DATE	CVE	VULNERABILITY TITLE	RISK
2024-05-17	CVE-2024-34370	Unspecified vulnerability in Wpfactory EAN for Woocommerce Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9. network low complexity wpfactory	7.2
2024-04-18	CVE-2023-6892	Cross-site Scripting vulnerability in Wpfactory EAN for Woocommerce The EAN for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_ean_product_meta' shortcode in all versions up to, and including, 4.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity wpfactory CWE-79	5.4