Thisfunctional Ctt Expresso Para Woocommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Thisfunctional Ctt Expresso Para Woocommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-47589 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <= 3.2.11 versions.
• CVE-2024-6687 — CVSS 5.3 (medium): The CTT Expresso para WooCommerce plugin for WordPress is vulnerable to sensitive information exposure in all versions up to and including…
• CVE-2024-6478 — CVSS 4.8 (medium): The CTT Expresso para WooCommerce WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high…