2723 matches found
CVE-2025-7642: Authentication Bypass Using an Alternate Path or Channel
The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwcwoocommerceordercreated function. This makes it possible for...
WordPress plugin Simpler Checkout 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-34507 · WordPress · Simpler Checkout
Name of the Vulnerable Software and Affected Versions: Simpler Checkout versions 0.7.0 through 1.1.9 Description: The Simpler Checkout plugin for WordPress is susceptible to authentication bypass. The plugin does not properly verify a user’s identity before granting access as an administrator...
WordPress Simpler Checkout <= 1.1.13 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by kr0d in WordPress Plugin Simpler Checkout versions = 1.1.13...
CVE-2025-7654
Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wfgetcookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies of other site users, which may make...
CVE-2025-53208: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in paymayapg Maya Business paymaya-checkout-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maya Business: from n/a through = 1.2.0...
CVE-2025-7654 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wfgetcookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies of other site users, which may make...
wordpress plugin FunnelKit – Funnel Builder for WooCommerce Checkout和wordpress plugin FunnelKit Automations 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... An information disclosur...
Shopware 6.6.10.4 Race Condition
A race condition exists within the voucher system of the Shopware Core. Successful exploitation of this vulnerability allows an attacker to bypass voucher usage limits during the checkout process. This vulnerability exists due to the fact that validation of voucher codes is not an atomic operatio...
Linux Distros Unpatched Vulnerability : CVE-2025-48384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to...
Malicious code in checkout-success-fragment (npm)
The package checkout-success-fragment was found to contain malicious code...
Malicious code in checkout_queue (npm)
The package checkoutqueue was found to contain malicious code...
Malicious code in scripts-checkout-apis-temp (npm)
The package scripts-checkout-apis-temp was found to contain malicious code...
Malicious code in checkout-automated-tests (npm)
The package checkout-automated-tests was found to contain malicious code...
MAL-2025-16884 Malicious code in checkout-web (npm)
The package checkout-web was found to contain malicious code...
Malicious code in checkout-web (npm)
The package checkout-web was found to contain malicious code...
MAL-2025-16882 Malicious code in checkout-automated-tests (npm)
The package checkout-automated-tests was found to contain malicious code...
Malicious code in argo-checkout-vue (npm)
The package argo-checkout-vue was found to contain malicious code...