← Back

Grandplugins

grandplugins

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Woo Quick View And Buy Now
woo_quick_view_and_buy_now
1 CVE
Avif Uploader
avif_uploader
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-9238
1Grandplugins
1Avif Uploader
Jun 17, 2026
May 15, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
CVE-2023-47657
1Grandplugins
1Woo Quick View And Buy Now
Jun 17, 2026
Nov 14, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin <= 1.5.8 versions.