31 matches found
CVE-2026-110191 Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information...
CVE-2026-110191
The Product Delivery Date for WooCommerce – Lite WordPress plugin (versions before 3.3.2 ) is vulnerable to an Order Information Disclosure flaw. The root cause is a missing capability check before the plugin discloses order details through its calendar view AJAX actions . This allows users with ...
EUVD-2026-102698
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information...
CVE-2026-110191 Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information...
PT-2026-115478
Name of the Vulnerable Software and Affected Versions Product Delivery Date for WooCommerce versions prior to 3.3.2 Description Insufficient capability checks in the calendar view AJAX actions allow users with the Contributor role to access and view order details belonging to other customers...
CVE-2026-110191: Exposure of Sensitive Information to an Unauthorized Actor
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information...
EUVD-2026-67465
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification...
CVE-2026-6286 Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification...
PT-2026-82880
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification...
EUVD-2022-47660
Malicious code in bioql PyPI...
EUVD-2022-44556
Malicious code in bioql PyPI...
EUVD-2022-47889
Malicious code in bioql PyPI...
CVE-2025-43743
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows any authenticated remote user to view other calendars by...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
Design/Logic Flaw
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726: Improper Neutralization of Input During Web Page Generation
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
PT-2023-14539 · Unknown · Touchdown Timesheet Tracking Component For Jira
Name of the Vulnerable Software and Affected Versions: TouchDown Timesheet tracking component for Jira version 4.1.4 Description: The issue allows for XSS in the calendar view. Recommendations: For version 4.1.4, update to a version that fixes the XSS issue in the calendar view, as the current...