Lucene search
+L

87 matches found

CNNVD
CNNVD
•added 2024/06/09 12:00 a.m.•16 views

WordPress plugin Advanced Local Pickup for WooCommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS6.7AI score0.00409EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/09 12:00 a.m.•0 views

CVE-2024-32814: Missing Authorization

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1...

5.3CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/09 12:00 a.m.•0 views

CVE-2024-31283: Missing Authorization

Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2...

9.8CVSS5.8AI score0.00409EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/22 2:59 p.m.•14 views

WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Advanced Local Pickup for WooCommerce versions = 1.6.1...

5.3CVSS7AI score0.00295EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/05 9:41 a.m.•14 views

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Advanced Local Pickup for WooCommerce versions = 1.6.2...

9.8CVSS7AI score0.00409EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/01/17 5:15 p.m.•15 views

CVE-2022-40702

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2...

4.3CVSS5.8AI score0.00379EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/17 4:51 p.m.•59 views

CVE-2022-40702

CVE-2022-40702: Missing Authorization in Zorem/Advanced Local Pickup for WooCommerce (WordPress plugin) affects versions

5.4CVSS6.3AI score0.00379EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/17 12:00 a.m.•0 views

CVE-2022-40702: Missing Authorization

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2...

5.4CVSS6.4AI score0.00379EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/17 12:00 a.m.•13 views

WordPress plugin Advanced Local Pickup for WooCommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

5.4CVSS6.6AI score0.00379EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/11/22 4:15 p.m.•5 views

CVE-2023-2841

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

7.2CVSS7.2AI score0.00597EPSS
SaveExploits0References4
OSV
OSV
•added 2023/11/22 4:15 p.m.•18 views

CVE-2023-2841

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

7.2CVSS7.3AI score0.00597EPSS
SaveExploits0References3
CVE
CVE
•added 2023/11/22 3:33 p.m.•104 views

CVE-2023-2841

CVE-2023-2841 concerns the WordPress plugin Advanced Local Pickup for WooCommerce. The vulnerability is an SQL Injection via the id parameter in versions up to and including 1.5.5 due to insufficient escaping and query preparation. Exploitation requires Administrator-level privileges (authenticat...

7.2CVSS7.1AI score0.00597EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•0 views

CVE-2023-2841: Improper Neutralization of Special Elements used in an SQL Command

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

7.2CVSS7AI score0.00597EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/22 12:00 a.m.•15 views

WordPress Plugin Advanced Local Pickup for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.2CVSS7.8AI score0.00597EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/04/27 12:00 a.m.•16 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to gain increased privileges...

7CVSS7.2AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•15 views

PT-2023-1014

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An elevation of privilege issue exists in the Windows kernel Advanced Local Procedure Call ALPC subsystem. The flaw is caused by a use-after-free condition where an ALPC message...

8.8CVSS8.9AI score0.40987EPSS
SaveExploits0References23
BDU FSTEC
BDU FSTEC
•added 2022/11/15 12:00 a.m.•13 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.00317EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/11/15 12:00 a.m.•15 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00653EPSS
SaveExploits0References3
OSV
OSV
•added 2022/11/09 10:15 p.m.•6 views

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.00317EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/11/09 10:15 p.m.•7 views

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.00317EPSS
SaveExploits0References3Affected Software17
Rows per page
Query Builder