Lucene search
+L

351 matches found

Schneier on Security
Schneier on Security
added 2024/02/13 8:13 p.m.11 views

A Hacker’s Mind is Out in Paperback

The paperback version of A Hackers Mind has just been published. Its the same book, only a cheaper format. But--and this is the real reason I am posting this--Amazon has significantly discounted the hardcover to $15 to get rid of its stock. This is much cheaper than I am selling it for, and cheap...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/01/25 2:15 a.m.13 views

CVE-2024-0617

The Category Discount Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcdsavediscount function in all versions up to, and including, 4.12. This makes it possible for unauthenticated attackers to modify product category...

5.3CVSS5.8AI score0.0049EPSS
SaveExploits0References3
CVE
CVE
added 2024/01/25 1:55 a.m.70 views

CVE-2024-0617

The CVE-2024-0617 entry concerns the Category Discount Woocommerce plugin for WordPress. A missing capability check in the wpcd_save_discount() function affects all versions up to and including 4.12, enabling unauthenticated attackers to modify product category discounts and potentially cause rev...

5.3CVSS6AI score0.0049EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.8 views

WordPress plugin Category Discount Woocommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.5AI score0.0049EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/01/24 12:0 a.m.12 views

WordPress Category Discount Woocommerce Plugin <= 4.11 is vulnerable to Cross Site Request Forgery (CSRF)

Software Category Discount Woocommerce Type Plugin Vulnerable versions = 4.11 Fixed in 4.12 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0617 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cff1c97352ca Credits Krzyszto...

5.3CVSS7AI score0.0049EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/24 12:0 a.m.13 views

PT-2024-15693 · WordPress · Category Discount Woocommerce

Name of the Vulnerable Software and Affected Versions: Category Discount Woocommerce plugin for WordPress versions up to, and including, 4.12 Description: The issue arises from a missing capability check on the wpcd save discount function, allowing unauthenticated attackers to modify product...

5.3CVSS6.1AI score0.0049EPSS
SaveExploits0References9
OSV
OSV
added 2023/12/18 3:15 p.m.3 views

CVE-2023-49843

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

8.8CVSS7.3AI score
SaveExploits0References1
NVD
NVD
added 2023/12/18 3:15 p.m.25 views

CVE-2023-49843

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

8.8CVSS0.00254EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/18 3:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21...

6.8CVSS7.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/18 2:43 p.m.81 views

CVE-2023-49843

CVE-2023-49843: Cross-Site Request Forgery in WordPress plugin First Order Discount Woocommerce (

8.8CVSS8.5AI score0.00254EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/18 12:0 a.m.6 views

WordPress Plugin First Order Discount Woocommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.4AI score0.00254EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/11/28 10:26 p.m.9 views

discountbrokerrealty.com Improper Access Control vulnerability OBB-3797398

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
NVD
NVD
added 2023/10/04 3:15 p.m.36 views

CVE-2023-40559

Cross-Site Request Forgery CSRF vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin = 2.4.0 versions...

8.8CVSS5.9AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/04 2:11 p.m.43 views

CVE-2023-40559 WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin = 2.4.0 versions...

4.3CVSS9.1AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/04 2:11 p.m.73 views

CVE-2023-40559

CVE-2023-40559 is a CSRF vulnerability in the TheDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin for WordPress (WooCommerce). Affected versions are

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.16 views

PT-2023-27511 · Woocommerce · Thedotstore Dynamic Pricing/Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin versions = 2.4.0 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their...

8.8CVSS8.9AI score0.00214EPSS
SaveExploits0References5
HackRead
HackRead
added 2023/08/28 11:30 p.m.27 views

Antivirus Software: The Best Deals, Coupons and Discounts

By Owais Sultan In today’s digital age, securing your devices and data from cyber threats is a top priority. Antivirus software… This is a post from HackRead.com Read the original post: Antivirus Software: The Best Deals, Coupons and Discounts...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2023/08/16 12:0 a.m.13 views

WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Dynamic Pricing and Discount Rules Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40559 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.8 views

WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Dynamic Pricing and Discount Rules Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 506694d0fc2e Credits...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2023/06/13 4:7 a.m.8 views

discount-cruises.de Cross Site Scripting vulnerability OBB-3422232

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Rows per page
Query Builder