WordPress Sticky add to cart for Woo plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Sticky add to cart for Woo plugin versions = 1.0.2. Solution No patched version available...

WordPress Sticky add to cart for Woo plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Sticky add to cart for Woo plugin versions = 1.0.2. Solution No patched version available...

WordPress RaCar Clear Cart for WooCommerce plugin <= 1.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress RaCar Clear Cart for WooCommerce plugin versions = 1.2.1. Solution No patched version available...

WordPress Remove Add to Cart Button for WooCommerce plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Remove Add to Cart Button for WooCommerce plugin versions = 1.0.2. Solution Update the WordPress Remove Add to Cart Button for WooCommerce plugin to the latest available version at least 1.0.3...

WordPress XT Floating Cart for WooCommerce plugin <= 2.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress XT Floating Cart for WooCommerce plugin versions = 2.6.2. Solution Update the WordPress XT Floating Cart for WooCommerce plugin to the latest available version at least 2.6.3...

WordPress J Cart Upsell and Cross-sell for WooCommerce plugin < 2.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress J Cart Upsell and Cross-sell for WooCommerce plugin versions 2.0.1. Solution Update the WordPress J Cart Upsell and Cross-sell for WooCommerce plugin to the latest available version at least 2.0.1...

Exposure of Resource to Wrong Sphere in microweber

Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...

PT-2022-13418 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber versions prior to 1.3 Description: The issue concerns business logic errors and incorrect authorization in the microweber repository. This allows users to add deleted products to a cart and buy them, exposing resources to the wrong...

Business Logic Errors in microweber

Microweber prior to 1.2.11 can suffer from insecure direct object references. A malicious actor can remove items from a victim's cart...

Business Logic Errors

Description I found a IDOR vulnerability where we can able to delete their product in the cart by the id parameter Steps to Produce: First add any product in to the cart and checkout In the checkout page , we can see the cart details and we have functionality to delete the product also I gave the...

S-Cart path traversal vulnerability

S-cart, a Php-based e-commerce management platform from the S-cart community, suffers from a path traversal vulnerability that stems from the failure of a web-based system or product to properly filter special elements in the path of a resource or file. An attacker could exploit the vulnerability...

Directory Traversal

S-Cart is vulnerable to directory traversal. The vulnerability exists due to a lack of sanitization of the input via the download function allowing an attacker to download arbitrary file via the download request...

GHSA-H676-PJR4-HGQX Path Traversal in S-Cart

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

Path Traversal in S-Cart

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

Directory traversal

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2021-44111

CVE-2021-44111 is a directory traversal vulnerability in S-Cart 6.7 allowing path traversal via the download function in sc-admin/backup. Public reports (CNVD/CNNVD/OSV/GHSA) describe the flaw as enabling access to sensitive information due to insufficient input filtering. The NVD entry lists the...