CVE-2022-43481

Cross-Site Request Forgery CSRF vulnerability in Advanced Coupons for WooCommerce Coupons plugin = 4.5 on WordPress leading to notice dismissal...

CVE-2022-43481 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Advanced Coupons for WooCommerce Coupons plugin = 4.5 on WordPress leading to notice dismissal...

CVE-2022-43481

Advanced Coupons for WooCommerce Coupons plugin (WordPress) contains a CSRF vulnerability affecting the dismissal of in‑app notices in versions up to and including 4.5.0.1. The root cause is likely missing CSRF protection on the notice dismissal action, enabling an attacker to trigger notice dism...

PT-2022-26935 · Woocommerce · Advanced Coupons For Woocommerce Coupons

Name of the Vulnerable Software and Affected Versions: Advanced Coupons for WooCommerce Coupons plugin version 4.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to notice dismissal. Recommendations: For Advanced Coupons for...

WordPress plugin Coupons for WooCommerce Coupons 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Notice Dismissal discovered by Muhammad Daffa Patchstack Alliance in WordPress Advanced Coupons for WooCommerce Coupons plugin versions = 4.5. Solution Update the WordPress Advanced Coupons for WooCommerce Coupons plugin to the latest...

The microweber application allows large characters to insert in the input field "Coupons" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Proof of Concept 1.Go to "Settings" click on "Coupons" and Add a new Coupons 2.Go to this drive link:- https://drive.google.com/file/d/1CcVCHWbvMk07IZ5v4dojrdJbC43ufhh/view?usp=sharing copy the payload and paste it on the "Code" input field 3.You will see the application accepts large characters...

WordPress Coupons plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Coupons plugin versions = 1.3.0. Solution Update the WordPress Coupons plugin to the latest available version at least 1.4.0...

WordPress Coupons plugin <= 1.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Coupons plugin versions = 1.3.0. Solution Update the WordPress Coupons plugin to the latest available version at least 1.4.0...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least...

WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin <= 3.1.11 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin versions = 3.1.11. Solution Update the WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin to the latest available version at least 3.1.12...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least 1.3.28...

WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin <= 3.1.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin versions = 3.1.11. Solution Update the WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin to the latest available version at least...

WordPress Smart Coupons for WooCommerce plugin <= 1.3.5 - Authenticated SQL injection (SQLi) vulnerability

Authenticated SQL injection SQLi vulnerability discovered in WordPress Smart Coupons for WooCommerce plugin versions = 1.3.5. Solution Update the WordPress Smart Coupons for WooCommerce plugin to the latest available version at least 1.3.6...

CVE-2021-36454

Cross Site Scripting XSS vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1 backups\backups.php, 2 blocks\blocks.php, 3 brands\brands.php, 4 comments\comments.php, 5 coupons\coupons.php, 6 feeds\feeds.php, 7 functions\functions.php, 8 items\items.php, 9...

vaping.coupons Cross Site Scripting vulnerability OBB-1481174

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Coupon Pusher CMS suffers from XSS vulnerability (CNVD-2020-26263)

Push Couponer CMS is a PHP Taobao coupon website system developed by PHP+MySQL. Push Coupon CMS has an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

WordPress WooCommerce Smart Coupons premium plugin <= 4.6.0 - Unauthenticated Coupon Creation vulnerability

Unauthenticated Coupon Creation vulnerability discovered by WordFence in WordPress WooCommerce Smart Coupons premium plugin versions = 4.6.0. Solution Update the WordPress WooCommerce Smart Coupons premium plugin to the latest available version at least 4.6.5...

WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation

By crafting a request with all of the necessary parameters, attackers could generate and send themselves valid gift certificates for a victim’s WooCommerce store. This vulnerability has been patched as of WooCommerce Smart Coupons 4.6.5...

Catalog Traversal Vulnerability in Coupon Pusher CMS

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive informatio...