Lucene search
+L

82 matches found

CNNVD
CNNVD
added 2024/06/09 12:0 a.m.7 views

WordPress plugin Advanced Local Pickup for WooCommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS6.7AI score0.00409EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/22 2:59 p.m.6 views

WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Advanced Local Pickup for WooCommerce versions = 1.6.1...

5.3CVSS7AI score0.00295EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/05 9:41 a.m.7 views

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Advanced Local Pickup for WooCommerce versions = 1.6.2...

9.8CVSS7AI score0.00409EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/01/17 5:15 p.m.7 views

CVE-2022-40702

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2...

4.3CVSS5.8AI score0.00379EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/17 4:51 p.m.40 views

CVE-2022-40702

CVE-2022-40702: Missing Authorization in Zorem/Advanced Local Pickup for WooCommerce (WordPress plugin) affects versions

5.4CVSS6.3AI score0.00379EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.4 views

WordPress plugin Advanced Local Pickup for WooCommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

5.4CVSS6.6AI score0.00379EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/11/22 4:15 p.m.3 views

CVE-2023-2841

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

7.2CVSS7.2AI score0.00602EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/22 4:15 p.m.8 views

CVE-2023-2841

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

7.2CVSS7.3AI score0.00602EPSS
SaveExploits0References3
CVE
CVE
added 2023/11/22 3:33 p.m.86 views

CVE-2023-2841

CVE-2023-2841 concerns the WordPress plugin Advanced Local Pickup for WooCommerce. The vulnerability is an SQL Injection via the id parameter in versions up to and including 1.5.5 due to insufficient escaping and query preparation. Exploitation requires Administrator-level privileges (authenticat...

7.2CVSS7.1AI score0.00602EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.7 views

WordPress Plugin Advanced Local Pickup for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.2CVSS7.8AI score0.00602EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/04/27 12:0 a.m.8 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to gain increased privileges...

7CVSS7.2AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.5 views

PT-2023-1014

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An elevation of privilege issue exists in the Windows kernel Advanced Local Procedure Call ALPC subsystem. The flaw is caused by a use-after-free condition where an ALPC message...

8.8CVSS8.9AI score0.41806EPSS
SaveExploits0References23
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.8 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.00298EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.10 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00624EPSS
SaveExploits0References3
OSV
OSV
added 2022/11/09 10:15 p.m.2 views

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/11/09 10:15 p.m.3 views

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References3Affected Software17
Microsoft CVE
Microsoft CVE
added 2022/11/08 8:0 a.m.211 views

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

...

7.8CVSS8.2AI score0.00298EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.6 views

PT-2022-5659 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Advanced Local Procedure Call ALPC handler. This can allow an attacker to elevate their...

7.8CVSS7.8AI score0.00298EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.13 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS7.2AI score0.02298EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/12 11:15 p.m.5 views

CVE-2022-22037

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.5CVSS7.1AI score0.02298EPSS
SaveExploits0References1
Rows per page
Query Builder