CVE-2023-51678

CVE-2023-51678 refers to a CSRF vulnerability in Doofinder WP & WooCommerce Search. The WordPress plugin Doofinder for WooCommerce had a vulnerability described as Missing Authorization via multiple AJAX actions, affecting versions up to 2.0.33; it is labeled as patched in the linked vulnerabilit...

WordPress Plugin Doofinder WP & WooCommerce Search Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Doofinder WP &...

PT-2024-14236 · Doofinder · Doofinder Wp & Woocommerce Search

Name of the Vulnerable Software and Affected Versions: Doofinder WP & WooCommerce Search versions 2.0.33 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 2.0.33 Fixed in 2.1.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51678 Patch priority Low CVSS severity Low 4.3 Developer Doofinder PSID 9effdff53885 Credits Abdi Pranata Required...

CVE-2023-40602

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

CVE-2023-40602

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

CVE-2023-40602 WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

CVE-2023-40602

CVE-2023-40602 affects Doofinder WP & WooCommerce Search plugin (versions

WordPress plugin Doofinder for WooCommerce Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

PT-2023-27533 · WordPress · Doofinder Wp & Woocommerce Search

Name of the Vulnerable Software and Affected Versions: Doofinder WP & WooCommerce Search versions 1.5.49 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects Doofinder WP & WooCommerce...

CVE-2023-49185

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7...

CVE-2023-49185

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7...

CVE-2023-49185

CVE-2023-49185 : Doofinder for WooCommerce (WordPress) is vulnerable to reflected XSS due to improper input neutralization during web page generation. Affected: Doofinder WP & WooCommerce Search plugin versions

CVE-2023-49185 WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7...

WordPress Plugin Doofinder WP & WooCommerce Search Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Doofinder for WooCommerce < 2.1.8 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49185 Patch priority Medium CVSS severity Medium 7.1 Developer Doofinder PSID 6796f29d2414 Credits Phd Required privilege...

WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 1.5.49 Fixed in 2.0.0 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2023-40602 Patch priority Low CVSS severity Low 4.7 Developer Doofinder PSID 9706ea3eb29b Credits minhtuanact Required privilege...