Lucene search
K

39 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.7 views

WordPress Checkout Mestres do WP for WooCommerce plugin 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update vulnerability

WordPress Checkout Mestres do WP for WooCommerce plugin 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update vulnerability discovered by kr0d in WordPress Plugin Checkout Mestres WP versions 8.6.5-8.7.5...

9.8CVSS5.5AI score0.00403EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-10558

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.0045EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-56182

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00147EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-56185

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00114EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:30 a.m.1 views

CVE-2023-51471

Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7...

8.2CVSS8.6AI score0.00076EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:59 a.m.5 views

CVE-2023-51469

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6...

9.8CVSS8.9AI score0.00147EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/11 5:21 p.m.3 views

CVE-2025-32695

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/09 6:14 p.m.4 views

WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by LVT-tholv2k in WordPress Plugin Checkout Mestres WP versions = 8.7.5...

9.8CVSS6.8AI score0.0045EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/09 5:15 p.m.12 views

CVE-2025-32695

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS0.0045EPSS
Exploits0References1
CVE
CVE
added 2025/04/09 4:13 p.m.92 views

CVE-2025-32695

CVE-2025-32695 describes an Incorrect Privilege Assignment vulnerability impacting the WordPress plugin Checkout Mestres WP (versions up to 8.7.5). The issue allows privilege escalation within Checkout Mestres WP. Public sources consistently reference the affected component and version range; exp...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/09 4:13 p.m.17 views

CVE-2025-32695 WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS0.0045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:13 p.m.3 views

CVE-2025-32695 WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS5.2AI score0.0045EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.1 views

WordPress plugin Checkout Mestres WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.0045EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/31 7:36 a.m.18 views

CVE-2025-2266

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...

9.8CVSS7.7AI score0.00403EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/29 7:3 a.m.7 views

CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...

9.8CVSS7.4AI score0.00403EPSS
Exploits1References3
CVE
CVE
added 2025/03/29 7:3 a.m.86 views

CVE-2025-2266

The CVE-2025-2266 entry concerns the WordPress plugin Checkout Mestres do WP for WooCommerce. Affected versions: 8.6.5–8.7.5. Root cause: a missing capability check in cwmpUpdateOptions() that allows unauthenticated modification of options. Impact: attackers can update arbitrary WordPress options...

9.8CVSS7.7AI score0.00403EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/03/29 12:0 a.m.6 views

PT-2025-13607 · WordPress · Checkout Mestres Wp

Name of the Vulnerable Software and Affected Versions: Checkout Mestres do WP for WooCommerce plugin for WordPress versions 8.6.5 through 8.7.5 Description: The issue allows unauthorized modification of data, leading to privilege escalation due to a missing capability check on the cwmpUpdateOptio...

9.8CVSS9.9AI score0.00403EPSS
Exploits1References14
CNNVD
CNNVD
added 2025/03/29 12:0 a.m.4 views

WordPress plugin Checkout Mestres do WP for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.4AI score0.00403EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/04 10:47 p.m.17 views

CVE-2024-44030

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP: from n/a through = 8.6...

7.2CVSS5.9AI score0.00936EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/02 9:19 a.m.18 views

CVE-2024-44030 WordPress Checkout Mestres WP plugin <= 8.6 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP: from n/a through = 8.6...

7.2CVSS0.00936EPSS
Exploits0References1
Rows per page
Query Builder