CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

50 matches found

RedhatCVE•added 2025/04/25 3:36 p.m.•13 views

CVE-2025-39461

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Nawawi Jamili Docket Cache docket-cache allows PHP Local File Inclusion.This issue affects Docket Cache: from n/a through = 24.07.02...

7.5CVSS7.2AI score0.00676EPSS

SaveExploits0References1

NVD•added 2025/04/17 4:15 p.m.•27 views

CVE-2025-39461

7.5CVSS0.00676EPSS

SaveExploits0References1

Cvelist•added 2025/04/17 3:15 p.m.•25 views

CVE-2025-39461 WordPress Docket Cache plugin <= 24.07.02 - Local File Inclusion vulnerability

7.5CVSS0.00676EPSS

SaveExploits0References1

Vulnrichment•added 2025/04/17 3:15 p.m.•10 views

CVE-2025-39461 WordPress Docket Cache plugin <= 24.07.02 - Local File Inclusion vulnerability

7.5CVSS7.2AI score0.00676EPSS

SaveExploits0References1

CVE•added 2025/04/17 3:15 p.m.•64 views

CVE-2025-39461

CVE-2025-39461 affects WordPress Docket Cache plugin (versions up to 24.07.02) and is a Local File Inclusion due to improper filename handling in PHP include/require. The vulnerability allows abuse of PHP file inclusion and has a CVSS v3.1 base score of 7.5 (High). Public details in connected sou...

7.5CVSS7.2AI score0.00676EPSS

SaveExploits0References1

CNNVD•added 2025/04/17 12:0 a.m.•9 views

WordPress plugin Docket Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00676EPSS

SaveExploits0References1

Positive Technologies•added 2025/04/17 12:0 a.m.•12 views

PT-2025-17017

Name of the Vulnerable Software and Affected Versions Docket Cache versions through 24.07.02 Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This vulnerability allows PHP Loc...

7.5CVSS8.2AI score0.00676EPSS

SaveExploits0References4

RedhatCVE•added 2025/02/05 12:48 p.m.•12 views

CVE-2024-43132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPWeb Elite Docket WooCommerce Collections / Wishlist / Watchlist allows SQL Injection.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

9.8CVSS7.5AI score0.00534EPSS

SaveExploits0References1

RedhatCVE•added 2025/02/05 12:31 p.m.•14 views

CVE-2024-43131

Incorrect Authorization vulnerability in WPWeb Docket WooCommerce Collections / Wishlist / Watchlist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

7.5CVSS6.8AI score0.00485EPSS

SaveExploits0References1

NVD•added 2024/08/29 3:15 p.m.•37 views

CVE-2024-43132

9.8CVSS0.00534EPSS

SaveExploits0References1

OSV•added 2024/08/29 3:15 p.m.•7 views

CVE-2024-43132

9.8CVSS5.8AI score0.00534EPSS

SaveExploits0References1

Cvelist•added 2024/08/29 2:44 p.m.•42 views

CVE-2024-43132 WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability

9.3CVSS0.00534EPSS

SaveExploits0References1

Vulnrichment•added 2024/08/29 2:44 p.m.•15 views

CVE-2024-43132 WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability

9.3CVSS9.6AI score0.00534EPSS

SaveExploits0References1

CVE•added 2024/08/29 2:44 p.m.•70 views

CVE-2024-43132

CVE-2024-43132: Unauthenticated SQL Injection in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) prior to v1.7.0 due to improper neutralization of inputs. Exploitation details are not provided in the initial doc, but Wordfence notes the issue was patched in version 1.7.0. Affe...

9.8CVSS9.9AI score0.00534EPSS

SaveExploits0References1Affected Software1

CNNVD•added 2024/08/29 12:0 a.m.•9 views

WordPress plugin Docket SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS7.8AI score0.00534EPSS

SaveExploits0References2

Positive Technologies•added 2024/08/29 12:0 a.m.•9 views

PT-2024-30321 · Woocommerce · Docket

Name of the Vulnerable Software and Affected Versions: Docket WooCommerce Collections / Wishlist / Watchlist versions prior to 1.7.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

9.8CVSS7.6AI score0.00534EPSS

SaveExploits0References10

OSV•added 2024/08/13 11:15 a.m.•7 views

CVE-2024-43131

7.5CVSS5.8AI score0.00485EPSS

SaveExploits0References1

NVD•added 2024/08/13 11:15 a.m.•27 views

CVE-2024-43131

7.5CVSS0.00485EPSS

SaveExploits0References1

Vulnrichment•added 2024/08/13 10:56 a.m.•24 views

CVE-2024-43131 WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

7.5CVSS7AI score0.00485EPSS

SaveExploits0References1

Cvelist•added 2024/08/13 10:56 a.m.•50 views

CVE-2024-43131 WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

7.5CVSS0.00485EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by