Wp3sixty Woo Custom Emails — known CVE vulnerabilities

Every CVE whose affected-product data names Wp3sixty Woo Custom Emails, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-45004 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wp3sixty Woo Custom Emails plugin <= 2.2 versions.
• CVE-2023-4315 — CVSS 6.1 (medium): The Woo Custom Emails for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wcemails_edit' parameter in versions up to…