Lucene search
+L

32 matches found

CNVD
CNVD
•added 2025/12/12 12:00 a.m.•8 views

WordPress Actionwear products sync plugin missing authorization vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A missing authorization vulnerability exists in the WordPress Actionwear products sync plugin, no details of the vulnerability are provided at this time...

4.3CVSS5.9AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:14 p.m.•12 views

CVE-2025-49350

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

4.3CVSS6AI score0.00375EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•10 views

EUVD-2025-202042

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

6.5AI score0.00375EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:17 p.m.•12 views

CVE-2025-49350

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

4.3CVSS0.00375EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•3 views

CVE-2025-49350 WordPress Actionwear products sync plugin <= 2.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

4.3CVSS6AI score0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•39 views

CVE-2025-49350 WordPress Actionwear products sync plugin <= 2.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

4.3CVSS0.00375EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•29 views

CVE-2025-49350

The CVE-2025-49350 entry concerns the WordPress Actionwear products sync plugin (versions up to 2.3.3). The root cause is a missing authorization due to incorrectly configured access control, leading to a broken access control vulnerability. Affected software is the Actionwear products sync plugi...

4.3CVSS6AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•11 views

WordPress plugin Actionwear products sync has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A missing authorization vulnerability exists in the WordPress Actionwear products sync plugin, no details of the vulnerability are provided at this time...

4.3CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•19 views

PT-2025-49985

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

7AI score0.00375EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•4 views

CVE-2025-49350: Missing Authorization

Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through = 2.3.3...

4.3CVSS6AI score0.00375EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/06 10:06 p.m.•19 views

WordPress Actionwear products sync plugin <= 2.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Actionwear products sync versions = 2.3.3...

4.3CVSS7AI score0.00375EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-4849

Malicious code in bioql PyPI...

5.3CVSS8.6AI score0.00529EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-9440

Malicious code in bioql PyPI...

8.5CVSS7.9AI score0.00471EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/03 9:38 p.m.•24 views

CVE-2025-31619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear products sync: from n/a through = 2.3.3...

8.5CVSS8.6AI score0.00471EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 9:15 p.m.•32 views

CVE-2025-31619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear products sync: from n/a through = 2.3.3...

8.5CVSS0.00471EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 8:58 p.m.•14 views

CVE-2025-31619 WordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear products sync: from n/a through = 2.3.3...

8.5CVSS8.4AI score0.00471EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 8:58 p.m.•36 views

CVE-2025-31619 WordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear products sync: from n/a through = 2.3.3...

8.5CVSS0.00471EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 8:58 p.m.•83 views

CVE-2025-31619

CVE-2025-31619 involves an SQL Injection in Actionwear products sync (WordPress plugin). The vulnerability arises from improper handling of SQL commands in the affected component, allowing an authenticated attacker to influence SQL queries. Affected software: Actionwear products sync, versions up...

8.5CVSS8.4AI score0.00471EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-31619: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear products sync: from n/a through = 2.3.3...

8.5CVSS8.6AI score0.00471EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•13 views

PT-2025-14437

Name of the Vulnerable Software and Affected Versions marcoingraiti Actionwear products sync versions n/a through 2.3.3 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

8.5CVSS8.4AI score0.00471EPSS
SaveExploits0References7
Rows per page
Query Builder