Lucene search
+L

38 matches found

CNVD
CNVD
added 2022/09/28 12:0 a.m.20 views

WordPress AlgolPlus Advanced Dynamic Pricing for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS4.7AI score0.00269EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/23 2:15 p.m.22 views

CVE-2022-38095

Cross-Site Request Forgery CSRF vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin = 4.1.3 at WordPress...

5.4CVSS0.00269EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/23 2:15 p.m.7 views

CVE-2022-38095

Cross-Site Request Forgery CSRF vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin = 4.1.3 at WordPress...

4.3CVSS5.8AI score0.00269EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/23 2:15 p.m.22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin = 4.1.3 at WordPress...

4.3CVSS4.8AI score0.00269EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/09/23 1:41 p.m.83 views

CVE-2022-38095

The CVE-2022-38095 entry concerns the WordPress plugin AlgolPlus Advanced Dynamic Pricing for WooCommerce (versions ≤ 4.1.3). Connected sources indicate a Cross-Site Request Forgery (CSRF) vulnerability arising from insufficient verification when updating settings, enabling actions authenticated ...

5.4CVSS4.8AI score0.00269EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/23 1:41 p.m.33 views

CVE-2022-38095 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin = 4.1.3 at WordPress...

5.4CVSS5.9AI score0.00269EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.8 views

WordPress plugin AlgolPlus Advanced Dynamic Pricing for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.7AI score0.00269EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/23 12:0 a.m.9 views

PT-2022-24198 · Woocommerce · Algolplus Advanced Dynamic Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

5.4CVSS4.6AI score0.00269EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/09 3:15 p.m.27 views

CVE-2022-35275

Authenticated shop manager+ Reflected Cross-Site Scripting XSS vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin = 3.3.1 at WordPress...

4.8CVSS0.00454EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/09 3:15 p.m.4 views

CVE-2022-35275

Authenticated shop manager+ Reflected Cross-Site Scripting XSS vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin = 3.3.1 at WordPress...

4.8CVSS5.8AI score0.00454EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/09/09 2:39 p.m.6 views

CVE-2022-35275 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated shop manager+ Reflected Cross-Site Scripting XSS vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin = 3.3.1 at WordPress...

4.8CVSS4.9AI score0.00454EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/09 2:39 p.m.79 views

CVE-2022-35275

Affected software: AlgolPlus Advanced Order Export For WooCommerce plugin (WordPress) versions ≤ 3.3.1. Issue: Authenticated user (shop manager+) can trigger a Reflected Cross-Site Scripting (XSS) vulnerability due to improper input handling. Impact: XSS could affect authenticated sessions and po...

4.8CVSS4.9AI score0.00454EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/09 2:39 p.m.33 views

CVE-2022-35275 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated shop manager+ Reflected Cross-Site Scripting XSS vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin = 3.3.1 at WordPress...

4.8CVSS5.2AI score0.00454EPSS
SaveExploits0References2
NVD
NVD
added 2020/05/06 6:15 p.m.50 views

CVE-2020-11727

A cross-site scripting XSS vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woeposttype parameter...

6.1CVSS6AI score0.01955EPSS
SaveExploits4References4
OSV
OSV
added 2020/05/06 6:15 p.m.8 views

CVE-2020-11727

A cross-site scripting XSS vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woeposttype parameter...

6.1CVSS5.8AI score0.01955EPSS
SaveExploits4References4
Prion
Prion
added 2020/05/06 6:15 p.m.20 views

Cross site scripting

A cross-site scripting XSS vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woeposttype parameter...

4.3CVSS6AI score0.01955EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
added 2020/05/06 5:27 p.m.47 views

CVE-2020-11727

A cross-site scripting XSS vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woeposttype parameter...

6AI score0.01955EPSS
SaveExploits4References4
CVE
CVE
added 2020/05/06 5:27 p.m.98 views

CVE-2020-11727

CVE-2020-11727 affects the AlgolPlus Advanced Order Export For WooCommerce plugin for WordPress (version 3.1.3). The XSS vulnerability arises in view/settings-form.php via the woe_post_type parameter, allowing remote attackers to inject arbitrary scripts/HTML. The provided sources describe the is...

6.1CVSS5.9AI score0.01955EPSS
SaveExploits4References4Affected Software1
Rows per page
Query Builder