604 matches found
WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes Disclosure
The plugin does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL. The vulnerability exists due to the plugin only preventing users from leaking coupons using the "coupons" aggregate field, and not the regular "coupon" field. Given a valid coupon...
WordPress WPGraphQL WooCommerce plugin <= 0.11.0 - Unauthenticated Coupon Codes Disclosure vulnerability
Unauthenticated Coupon Codes Disclosure vulnerability discovered by Rohan Pagey in WordPress WPGraphQL WooCommerce plugin versions = 0.11.0. Solution No patched version available...
WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes Disclosure
The plugin does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL. PoC The vulnerability exists due to the plugin only preventing users from leaking coupons using the "coupons" aggregate field, and not the regular "coupon" field. Given a valid...
CVE-2022-0818 Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS
The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin...
No Rate Limit on Copoun Code Functionality
Description The attacker has the ability to send any number of requests to the endpoint due to the absence of rate-limiting. Steps to reproduce - Simply capture the adding coupon request and send it to burp. - Send it to the repeater tab and you will be able to send many requests without blocking...
Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS
The plugin does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin. PoC curl https://example.com/wp-admin/admin-ajax.php...
WordPress Coupon Affiliates plugin <= 4.16.4.4 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by cydave in WordPress Coupon Affiliates plugin versions = 4.16.4.4. Solution Update the WordPress Coupon Affiliates plugin to the latest available version at least 4.16.4.5...
WordPress Coupon Plugin for Bloggers and Marketers – WP Offers plugin <= 1.1.3 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Coupon Plugin for Bloggers and Marketers – WP Offers plugin versions = 1.1.3. Solution Update the WordPress Coupon Plugin for Bloggers and Marketers – WP Offers plugin to the latest available version at least 1.1.4...
WordPress Coupon Plugin for Bloggers and Marketers – WP Offers plugin <= 1.1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Coupon Plugin for Bloggers and Marketers – WP Offers plugin versions = 1.1.3. Solution Update the WordPress Coupon Plugin for Bloggers and Marketers – WP Offers plugin to the latest available version a...
WordPress WooCommerce Next Order Coupon plugin <= 0.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Next Order Coupon plugin versions = 0.4.0. Solution No patched version available...
WordPress Coupon Affiliates plugin < 4.16.4.5 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Coupon Affiliates plugin versions 4.16.4.5. Solution Update the WordPress Coupon Affiliates plugin to the latest available version at least 4.16.4.5...
WordPress Coupon Affiliates plugin < 4.16.4.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Coupon Affiliates plugin versions 4.16.4.5. Solution Update the WordPress Coupon Affiliates plugin to the latest available version at least 4.16.4.5...
Privilege Escalation
microweber/microweber is vulnerable to privilege escalation. The use of one-time coupon multiple time allows an attacker to manipulate One-Time-Coupon Handler using malicious input...
GHSA-3P9J-442X-HJP7 Business Logic Errors in microweber
microweber prior to 1.2.11 allows multiple uses of a single-use coupon...
Business Logic Errors in microweber
microweber prior to 1.2.11 allows multiple uses of a single-use coupon...
CVE-2022-0689
Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0689
CVE-2022-0689 affects microweber/microweber prior to 1.2.11, where the one-time coupon logic allows multiple uses. This is a business-logic error enabling coupon reuse. Connected sources (Red Hat, OSV, GHSA, CNVD, NVD, and others) corroborate the same description. The documentation does not speci...
CVE-2022-0689 Use multiple time the one-time coupon in microweber/microweber
Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11...
Use multiple time the one-time coupon
Description I create a coupon only for one user and a one-time use coupon. Then create two users, and both of them can use the coupon, but only one of them should be able to use the coupon. Proof of Concept first, create a one-time and one-user coupon code that, e.g. is aaaaa. the attacker has tw...
Business Logic Errors in microweber/microweber
Description A fixed price coupon can be applied to get negative price for a product Proof of Concept 1: Create a fixed coupon Example: $200 coupon, $300 minimum 2: Add two products into the cart Example $50 + $300 3: Apply the fixed coupon. 4: Remove the $300 product. Observe that the price is no...