16 matches found
CVE-2025-23471
Cross-Site Request Forgery CSRF vulnerability in etemplates ECT Add to Cart Button ect-add-to-cart-button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through = 1.4...
EUVD-2025-18899
Malicious code in bioql PyPI...
EUVD-2025-3199
Malicious code in bioql PyPI...
CVE-2025-48254
CVE-2025-48254 affects the WordPress plugin Change Add to Cart Button Text for WooCommerce. Connected sources confirm an improper input neutralization leading to a stored XSS vulnerability in web page generation, applicable to versions n/a through 2.2.2. Public details list CVSS metrics (several ...
WordPress plugin Change Add to Cart Button Text for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the...
CVE-2025-23471
Cross-Site Request Forgery CSRF vulnerability in etemplates ECT Add to Cart Button ect-add-to-cart-button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through = 1.4...
CVE-2025-23471 WordPress ECT Add to Cart Button plugin <= 1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in etemplates ECT Add to Cart Button ect-add-to-cart-button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through = 1.4...
CVE-2025-23471
CVE-2025-23471 describes a CSRF weakness in the ECT Add to Cart Button (Andy Chapman) that can lead to Stored XSS. Affected product: ECT Add to Cart Button; affected range: up to version 1.4 (from n/a through 1.4). Connected sources confirm the same description but do not provide technical detail...
CVE-2025-23471 WordPress ECT Add to Cart Button plugin <= 1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Andy Chapman ECT Add to Cart Button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through 1.4...
WordPress plugin ECT Add to Cart Button 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin ECT Add t...
CVE-2024-49296
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...
CVE-2024-49296
CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...
CVE-2024-49296 WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Coder426 Custom Add to Cart Button Label and Link allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through 1.6.1...
WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Custom Add to Cart Button Label and Link versions = 1.6.1...
WordPress Remove Add to Cart Button for WooCommerce Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Remove Add to Cart Button for WooCommerce Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e8228bf4c98a Credits Rafie...
WordPress Remove Add to Cart Button for WooCommerce plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Remove Add to Cart Button for WooCommerce plugin versions = 1.0.2. Solution Update the WordPress Remove Add to Cart Button for WooCommerce plugin to the latest available version at least 1.0.3...