CVE-2024-54251

Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through = 3.1.2...

CVE-2024-54251 WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through = 3.1.2...

CVE-2024-54251 WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through = 3.1.2...

CVE-2024-54251

CVE-2024-54251: Broken Access Control in WordPress Prodigy Commerce plugin

WordPress Plugin Prodigy Commerce has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-54251: Missing Authorization

Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through = 3.1.2...

PT-2024-36131 · Unknown · Prodigy Commerce

Name of the Vulnerable Software and Affected Versions: Prodigy Commerce versions 3.0.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in Prodigy Commerce, allowing the exploitation of incorrectly configured access control security levels. Recommendations: F...

CVE-2023-51357: Missing Authorization

Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through = 6.5.0...

WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Khalid Yusuf Patchstack Alliance in WordPress Plugin Prodigy Commerce versions = 3.1.2...

WordPress Prodigy Commerce plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf Patchstack Alliance in WordPress Plugin Prodigy Commerce versions = 3.0.8...

CVE-2024-52462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2024-52462 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2024-52462

CVE-2024-52462 : WordPress plugin WP e-Commerce Style Email (versions ≤ 0.6.2) contains a Reflected Cross‑Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. Affected software: WP e-Commerce Style Email. Root cause/impact: unauthenticated input can ...

CVE-2024-52462 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

WordPress plugin WP e-Commerce Style Email cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-52462: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

PT-2024-35302

Name of the Vulnerable Software and Affected Versions WP e-Commerce Style Email versions 0.6.2 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations For versio...

Malware in node-commerce-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Ni WooCommerce Cost Of Goods versions = 3.2.8...

Adobe Commerce Magento SSRF

The vulnerability of software platforms for developing and managing Adobe Commerce and Magento Open Source online stores is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...