35 matches found
WordPress WooCommerce Checkout Field Editor (Checkout Manager) plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Skalucy Patchstack Alliance in WordPress Plugin WooCommerce Checkout Field Editor Checkout Manager versions = 2.1.8...
WordPress WooCommerce Checkout Field Editor (Checkout Manager) Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software WooCommerce Checkout Field Editor Checkout Manager Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31262 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID...
WordPress WooCommerce Checkout Manager Plugin <= 7.3.0 is vulnerable to Broken Access Control
Software WooCommerce Checkout Manager Type Plugin Vulnerable versions = 7.3.0 Fixed in 7.3.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47681 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID b9559fa71258 Credits Rafie Muhammad...
CVE-2022-3490 Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection
The Checkout Field Editor Checkout Manager for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
Design/Logic Flaw
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
CVE-2019-11807
CVE-2019-11807 affects the WordPress plugin “WooCommerce Checkout Manager” (before version 4.3). The vulnerability allows unauthenticated users to delete media via an AJAX endpoint: wp-admin/admin-ajax.php?action=update_attachment_wccm with the wccm_default_keys_load parameter, caused by an insec...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
WordPress WooCommerce Checkout Manager Plugin Arbitrary File Upload
An Arbitrary File Upload vulnerability exists in WordPress WooCommerce Checkout Manager Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WooCommerce Checkout Manager Plugin for WordPress < 4.3 Arbitrary File Upload
The WordPress WooCommerce Checkout Manager Plugin installed on the remote host is affected by an arbitrary file upload vulnerability. An unauthenticated, remote attacker can leverage this issue to escalate privileges and execute arbitrary code on the affected host. Note that the scanner has not...
Users Urged to Update WordPress Plugin After Flaw Disclosed
UPDATE A vulnerability in a popular WordPress plugin called the WooCommerce Checkout Manager extension is potentially putting more than 60,000 websites at risk, researchers say. The WooCommerce Checkout Manager plugin allows WooCommerce users to customize and manage the fields on their checkout...
Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension
If you own an eCommerce website built on WordPress and powered by WooCommerce plugin, then beware of a new, unpatched vulnerability that has been made public and could allow attackers to compromise your online store. A WordPress security company—called "Plugin Vulnerabilities "—that recently gone...
WordPress WooCommerce Checkout Manager plugin 4.2.6 (latest) - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability found in WordPress WooCommerce Checkout Manager plugin version 4.2.6. Solution 26 April 2019 - no patched version available...
