Lucene search
K

20 matches found

Patchstack
Patchstack
added 2026/02/16 7:45 a.m.7 views

WordPress BlueSnap Payment Gateway for WooCommerce plugin <= 3.3.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation vulnerability

Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin BlueSnap Payment Gateway for WooCommerce versions = 3.3.0...

7.5CVSS5.5AI score0.00281EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/15 7:10 a.m.4 views

CVE-2026-0692

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

7.5CVSS5.9AI score0.00281EPSS
Exploits0References1
NVD
NVD
added 2026/02/14 5:16 a.m.9 views

CVE-2026-0692

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

7.5CVSS0.00281EPSS
Exploits0References3
CVE
CVE
added 2026/02/14 4:35 a.m.13 views

CVE-2026-0692

The CVE-2026-0692 entry concerns the BlueSnap Payment Gateway for WooCommerce WordPress plugin. Affected component: the plugin (up to version 3.3.0). Root cause: it validates IPN requests by relying on WooCommerce’s WC_Geolocation::get_ip_address(), which trusts user-controllable headers (e.g., X...

7.5CVSS5.9AI score0.00281EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/14 4:35 a.m.28 views

CVE-2026-0692 BlueSnap Payment Gateway for WooCommerce <= 3.4.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

7.5CVSS0.00281EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/14 4:35 a.m.2 views

CVE-2026-0692 BlueSnap Payment Gateway for WooCommerce <= 3.4.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

7.5CVSS5.8AI score0.00281EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/14 12:0 a.m.6 views

WordPress plugin BlueSnap Payment Gateway for WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.5CVSS5.8AI score0.00281EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/14 12:0 a.m.5 views

PT-2026-8048

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.0. This is due to the plugin relying on WooCommerce's WC Geolocation::get ip address function to validate IPN requests, which trusts user-controllable...

7.5CVSS5.5AI score0.00281EPSS
Exploits0References4
Openbugbounty
Openbugbounty
added 2017/02/15 9:45 a.m.7 views

sandbox.bluesnap.com XSS vulnerability

Vulnerable URL: https://sandbox.bluesnap.com/jsp/buynow.jsp?contractId=2259275&custom1;==USD&custom2;=%27%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E&custom4;=KNOXSS Details: Description| Value ---|--- Patched:| Yes, at 25.08.2017 Latest check for patch:| 25.08.2017 15:48 GMT Vulnerability...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:27 a.m.17 views

download.bluesnap.com XSS vulnerability

Vulnerable URL: https://download.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:23 a.m.26 views

wwww.bluesnap.com XSS vulnerability

Vulnerable URL: https://wwww.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability type:...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:23 a.m.9 views

speedbit.bluesnap.com XSS vulnerability

Vulnerable URL: https://speedbit.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:22 a.m.13 views

iknowfirst.bluesnap.com XSS vulnerability

Vulnerable URL: https://iknowfirst.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:52 GMT Vulnerability...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:22 a.m.11 views

smartftp.bluesnap.com XSS vulnerability

Vulnerable URL: https://smartftp.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 29.08.2017 Latest check for patch:| 29.08.2017 05:39 GMT Vulnerability...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:19 a.m.12 views

cp.bluesnap.com XSS vulnerability

Vulnerable URL: https://cp.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:52 GMT Vulnerability type:|...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:19 a.m.12 views

powermapper.bluesnap.com XSS vulnerability

Vulnerable URL: https://powermapper.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:52 GMT Vulnerabilit...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/13 6:16 a.m.10 views

www3.bluesnap.com XSS vulnerability

Vulnerable URL: https://www3.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability type:...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/11 2:48 a.m.7 views

bluesnap.com XSS vulnerability

Vulnerable URL: https://www.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability type:|...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/11 2:48 a.m.9 views

checkout.bluesnap.com XSS vulnerability

Vulnerable URL: https://checkout.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/02/11 2:42 a.m.13 views

comodo.bluesnap.com XSS vulnerability

Vulnerable URL: https://comodo.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability...

6.3AI score
Exploits0
Rows per page
Query Builder