N/A Unfixed Closed
2023-07-18≤ 0.4
WordPress WooCommerce Next Order Coupon Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)
WordPress WooCommerce Next Order Coupon Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Unauthorised AJAX Calls via Freemius
WordPress WooCommerce Next Order Coupon plugin <= 0.4.0 - Sensitive Information Disclosure vulnerability
WordPress WooCommerce Next Order Coupon plugin <= 0.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability