Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.1 views

CVE-2025-68025

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...

6.5CVSS5.5AI score0.00056EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.3 views

CVE-2025-68025

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...

6.5CVSS0.00056EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.2 views

CVE-2025-68025 WordPress Addonify Floating Cart For WooCommerce plugin <= 1.2.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...

6.5CVSS5.1AI score0.00056EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.21 views

CVE-2025-68025 WordPress Addonify Floating Cart For WooCommerce plugin <= 1.2.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...

6.5CVSS0.00056EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.5 views

CVE-2025-68025

CVE-2025-68025 describes a Missing Authorization vulnerability in the WordPress plugin Addonify Floating Cart For WooCommerce (versions up to 1.2.17). The Red Hat/NVD entries and Patchstack/ PT Security details confirm a broken/badly configured access control that could allow unauthorized access....

6.5CVSS5.5AI score0.00056EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.4 views

PT-2026-21074

Name of the Vulnerable Software and Affected Versions Addonify Floating Cart For WooCommerce versions through 1.2.17 Description An authorization issue exists in Addonify Floating Cart For WooCommerce. The issue involves incorrectly configured access control security levels, potentially allowing...

5.3AI score0.00056EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

WordPress plugin Addonify Floating Cart For WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

6.5CVSS5.8AI score0.00056EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/05 7:35 a.m.5 views

WordPress Addonify Floating Cart For WooCommerce plugin <= 1.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Addonify Floating Cart For WooCommerce versions = 1.2.17...

5.3AI score0.00056EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-47966

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00135EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:24 a.m.3 views

CVE-2024-6987

The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchidstoreactivateplugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS6.5AI score0.00135EPSS
Exploits0References1
OSV
OSV
added 2024/08/08 5:15 a.m.1 views

CVE-2024-6987

The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchidstoreactivateplugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2024/08/08 4:11 a.m.18 views

CVE-2024-6987 Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation

The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchidstoreactivateplugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS0.00135EPSS
Exploits0References3
CVE
CVE
added 2024/08/08 4:11 a.m.39 views

CVE-2024-6987

The CVE-2024-6987 entry concerns the Orchid Store WordPress theme. The documented root cause is a missing capability check in orchid_store_activate_plugin, enabling unauthorized data modification by authenticated users with Subscriber-level access and above to activate the Addonify Floating Cart ...

4.3CVSS4.4AI score0.00135EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder