Lucene search
K

30 matches found

CNNVD
CNNVD
added 2024/12/17 12:0 a.m.3 views

WordPress plugin WooCommerce Additional Fees On Checkout (Free) 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

6.1CVSS7.4AI score0.00463EPSS
Exploits0References18
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.3 views

WordPress plugin BitPay Checkout for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.6AI score0.00452EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/23 12:0 a.m.2 views

WordPress plugin Payments Plugin and Checkout Plugin for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.5AI score0.00437EPSS
Exploits0References3
OSV
OSV
added 2024/08/26 9:15 p.m.2 views

CVE-2024-43316

Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Payments For WooCommerce by Checkout: from n/a through 1.9.1...

4.3CVSS5.8AI score0.00172EPSS
Exploits0References1
OSV
OSV
added 2023/12/31 6:15 p.m.3 views

CVE-2023-51469

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6...

9.8CVSS7.3AI score0.0057EPSS
Exploits0References1
OSV
OSV
added 2023/03/27 2:15 p.m.2 views

CVE-2022-46843

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...

6.1CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2023/03/17 12:31 p.m.42 views

CVE-2023-1469

CVE-2023-1469 affects the WordPress WP Express Checkout plugin. Vulnerability: stored cross-site scripting via pec_coupon[code] in versions up to 2.2.8 caused by insufficient input sanitization and output escaping. Impact: authenticated attackers with administrator-level access can inject web scr...

4.8CVSS4.9AI score0.00352EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/20 8:10 p.m.32 views

CVE-2019-7441

cgi-bin/webscr?cmd=cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter such as amount1, as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it is true that the amou...

6.5AI score0.06049EPSS
Exploits5References4
Patchstack
Patchstack
added 2015/05/15 12:0 a.m.10 views

WordPress Checkout Plugin - Remote Code Execution

This plugin is prone to a file upload remote code execution vulnerability. Solution Upgrade version Timthumb or Delete Files timthumb.php...

5.1AI score
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2015/05/15 12:0 a.m.109 views

WordPress Checkout Plugin - Remote Code Execution

This plugin is prone to a file upload remote code execution vulnerability. Solution Upgrade version Timthumb or Delete Files timthumb.php...

5.1AI score
Exploits0References1Affected Software1
Rows per page
Query Builder