6 matches found
CVE-2026-16620
The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an unauthenticated visitor to add such a product to the cart at an arbitrary value below the merchant-defined allowed...
CVE-2026-16620 WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Mode
The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an unauthenticated visitor to add such a product to the cart at an arbitrary value below the merchant-defined allowed...
CVE-2018-17606
CVE-2018-17606 is rejected; this candidate is a reservation duplicate of CVE-2018-16620.
CVE-2018-16620
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
CVE-2018-16620
The CVE-2018-16620 entry concerns Sonatype Nexus Repository Manager prior to 3.14, with Improper/Incorrect Access Control. Multiple connected sources confirm the issue arises from failing to enforce access controls, enabling a misbehavior that could let an attacker reach other hosts or open ports...