Lucene search
+L

69 matches found

Patchstack
Patchstack
•added 2025/08/14 12:15 p.m.•23 views

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by tratt Patchstack Alliance in WordPress Plugin Dynamic Pricing With Discount Rules for WooCommerce versions = 4.5.9...

9.8CVSS7.1AI score0.0044EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/08 11:58 a.m.•18 views

CVE-2025-49077

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 12:15 p.m.•27 views

CVE-2025-49077

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS0.0014EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 11:18 a.m.•82 views

CVE-2025-49077

CVE-2025-49077: CSRF vulnerability in WordPress plugin Dynamic Pricing and Discount Rules (versions

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•2 views

CVE-2025-49077: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•15 views

WordPress plugin Dynamic Pricing and Discount Rules 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

4.3CVSS4.8AI score0.0014EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/30 2:22 p.m.•25 views

WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by luckybuddy Patchstack Alliance in WordPress Plugin Dynamic Pricing and Discount Rules versions = 2.2.9...

4.3CVSS6.8AI score0.0014EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:39 p.m.•18 views

CVE-2022-2090

The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting...

6.1CVSS6.7AI score0.00773EPSS
SaveExploits2References1
OSV
OSV
•added 2025/05/07 3:16 p.m.•18 views

CVE-2025-47544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce allows Blind SQL Injection. This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through 4.5.8...

7.2CVSS5.8AI score0.00459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•13 views

CVE-2025-47544 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS8.9AI score0.00459EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•37 views

CVE-2025-47544 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS0.00459EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•13 views

WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in the WordPress...

7.6CVSS8.2AI score0.00459EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/16 7:15 a.m.•21 views

CVE-2020-36834

The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions in versions up to, and including, 2.0.2 due to missing capability checks on various functions. This makes it possible for subscriber-level attackers to execute various actions a...

6.3CVSS0.00354EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/16 6:43 a.m.•16 views

CVE-2020-36834 Discount Rules for WooCommerce <= 2.0.2 - Missing Authorization

The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions in versions up to, and including, 2.0.2 due to missing capability checks on various functions. This makes it possible for subscriber-level attackers to execute various actions a...

6.3CVSS7.2AI score0.00354EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/16 6:43 a.m.•56 views

CVE-2020-36834

The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization in versions up to and including 2.0.2 . The root cause is a lack of capability checks on various functions during several AJAX actions . This flaw allows subscriber-level attackers to perform unauthoriz...

6.3CVSS6.3AI score0.00354EPSS
SaveIn wildExploits0References2
Cvelist
Cvelist
•added 2024/10/16 2:05 a.m.•36 views

CVE-2024-8541 Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site Scripting

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. Th...

4.7CVSS0.00436EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•7 views

WordPress plugin Discount Rules for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.3CVSS6.7AI score0.00354EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•0 views

CVE-2020-36834: Missing Authorization

The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions in versions up to, and including, 2.0.2 due to missing capability checks on various functions. This makes it possible for subscriber-level attackers to execute various actions a...

6.3CVSS5.9AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•3 views

CVE-2024-8541: Improper Neutralization of Input During Web Page Generation

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. Th...

6.1CVSS5.9AI score0.00436EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/15 1:05 p.m.•12 views

WordPress Discount Rules for WooCommerce plugin <= 2.6.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Discount Rules for WooCommerce versions = 2.6.5...

6.1CVSS6.3AI score0.00436EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder