Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2025-27645

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00596EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/09/13 7:25 a.m.11 views

CVE-2025-8570

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS5.9AI score0.00596EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2025/09/11 12:36 p.m.226 views

Exploit for CVE-2025-8570

CVE-2025-8570 BeyondCart Connector = 2.1.0 - Missing Confi...

9.8CVSS7.5AI score0.00596EPSS
Exploits1
NVD
NVD
added 2025/09/11 8:15 a.m.9 views

CVE-2025-8570

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS0.00596EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/09/11 7:24 a.m.8 views

CVE-2025-8570 BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 2.1.0. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS6AI score0.00596EPSS
Exploits1References2
CVE
CVE
added 2025/09/11 7:24 a.m.27 views

CVE-2025-8570

The BeyondCart Connector plugin for WordPress (versions 1.4.2 through 2.1.0) is affected by Privilege Escalation due to improper JWT secret management and authorization in the determine_current_user filter. This allows unauthenticated attackers to craft valid JWTs and impersonate any user (includ...

9.8CVSS5.9AI score0.00596EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/11 7:24 a.m.15 views

CVE-2025-8570 BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS0.00596EPSS
Exploits1References3
Patchstack
Patchstack
added 2025/09/11 1:59 a.m.12 views

WordPress BeyondCart Connector plugin <= 3.0.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin BeyondCart Connector versions = 3.0.1...

9.8CVSS6.7AI score0.00596EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.9 views

PT-2025-37134

Name of the Vulnerable Software and Affected Versions: BeyondCart Connector plugin for WordPress versions 1.4.2 through 2.1.0 Description: The BeyondCart Connector plugin for WordPress is susceptible to privilege escalation due to improper JWT JSON Web Token secret management and authorization...

9.8CVSS6.6AI score0.00596EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/09/11 12:0 a.m.7 views

WordPress plugin BeyondCart Connector 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A trust management issue...

9.8CVSS6.7AI score0.00596EPSS
Exploits1References2
Rows per page
Query Builder