Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue affects Caddy – Smart Side Cart for WooCommerce: from n/a through 1.9.7...

CVE-2023-49854 WordPress Caddy Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue affects Caddy – Smart Side Cart for WooCommerce: from n/a through 1.9.7...

CVE-2023-49854

CVE-2023-49854 is a CSRF vulnerability in the WordPress plugin Caddy – Smart Side Cart for WooCommerce. Affected versions are 1.9.7 and earlier; patched in 1.9.8. The NVD entry rates the issue as high (CVSS v3.1: 8.8), while Patchstack lists patch priority as low and notes unauthenticated CSRF ri...

CVE-2023-49855 WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin <= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3...

CVE-2023-49855 WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin <= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3...

CVE-2023-49855

CSRF vulnerability in BinaryCarpenter’s Menu Bar Cart Icon For WooCommerce (plugin by Binary Carpenter) affects versions up to 1.49.3. Root cause per CVE records: missing nonce validation enabling unauthenticated forged requests. Impact can include unauthorized actions on affected WordPress sites...

WordPress Plugin Add to Cart Text Changer and Customize Button, Add Custom Icon Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Add to Cart Text Changer a...

PT-2023-31073 · Unknown · Saiful Islam Add To Cart Text Changer/Customize Button

Name of the Vulnerable Software and Affected Versions: Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-31396 · Woocommerce · Caddy – Smart Side Cart For Woocommerce

Name of the Vulnerable Software and Affected Versions: Caddy – Smart Side Cart for WooCommerce versions 1.9.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

WordPress Plugin Menu Bar Cart Icon For WooCommerce By Binary Carpenter Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2023-6579

A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulation of the argument estimatecountryid leads to sql injection. Th...

CVE-2023-6579 osCommerce POST Parameter shopping-cart sql injection

A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulation of the argument estimatecountryid leads to sql injection. Th...

osCommerce SQL注入漏洞

osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. An SQL injection vulnerability exists in osCommerce, which originates from the lack of validation of the parameter estimatecountryid in the file /b2b-supermarket/shopping-cart against externally entered...

PT-2023-32706 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: osCommerce 4 affected versions not specified Description: A critical issue has been found in osCommerce 4, affecting some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulati...

Ecwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. PoC http://vulnerable-site.tld/wp-admin/admin-ajax.php?action=ecwidstorefrontsetpageslug=hehehehe Besides, you can disable the...

WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.16.1 is vulnerable to Broken Access Control

Software Abandoned Cart Lite for WooCommerce Type Plugin Vulnerable versions = 5.16.1 Fixed in 5.16.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41671 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3de22af17a6b Credits Mika...

WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Add to Cart Text Changer and Customize Button, Add Custom Icon Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49153 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PS...

WordPress Abandoned Cart Lite for WooCommerce Plugin < 5.15.2 Authentication Bypass Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tychesoftwares:abandonedcartliteforwoocommerce"; if...

Sunshine Photo Cart < 3.0 - Insecure Direct Object Reference to Order Manipulation

Description The Sunshine Photo Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.9.25 due to missing validation on a user-controlled key. This can allow unauthenticated attackers to manipulate orders that do not belong to them...