← Back

All In One B2b For Woocommerce

all_in_one_b2b_for_woocommerce

Vendor: All In One B2b For Woocommerce Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4703
1All In One B2b For Woocommerce Project
1All In One B2b For Woocommerce
Jun 17, 2026
Jan 16, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user. Updating the pas...Show more
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user. Updating the password of an Admin user leads to privilege escalation.Show less
CVE-2023-3547
1All In One B2b For Woocommerce Project
1All In One B2b For Woocommerce
Jun 17, 2026
Sep 25, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.