3060 matches found
PT-2025-14090 · Unknown · Welcart E-Commerce
Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.11.6 and earlier Description: The issue concerns an untrusted data deserialization vulnerability. If exploited, this could allow a remote unauthenticated attacker to execute arbitrary code and access websites...
Welcart e-Commerce 代码问题漏洞
Welcart e-Commerce is a free e-commerce plugin for WordPress from Welcart Japan. A code issue vulnerability exists in Welcart e-Commerce version 2.11.6 and earlier, which stems from untrustworthy data deserialization and could lead to the execution of arbitrary code by a remote, unauthenticated...
CVE-2025-30909
Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through = 7.2.3...
WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Verge3D versions = 4.8.2...
CVE-2025-30615
Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...
CVE-2025-30615
Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...
CVE-2025-30615
CVE-2025-30615 is a Cross-Site Request Forgery leading to Remote Code Execution in the WordPress plugin WP e-Commerce Style Email . The Wordfence vulnerability list documents a CSRF-to-RCE chain for this plugin, affecting version range from unknown/na to 0.6.2, with a CVSSv3.1 base score of 9.6 (...
CVE-2025-30615 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability
Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...
WordPress plugin WP e-Commerce Style Email 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
e-commerce-magazin.de Cross Site Scripting vulnerability OBB-4037280
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-9149
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...
E-Commerce-Website-Using-PHP 代码问题漏洞
E-Commerce-Website-Using-PHP is a free and open source full-featured e-commerce website project. A code issue vulnerability exists in E-Commerce-Website-Using-PHP version 1.0, which stems from an incorrect manipulation of the parameter name can lead to unlimited uploads...
E-Commerce-Website-Using-PHP 注入漏洞
E-Commerce-Website-Using-PHP is a free and open source full-featured e-commerce website project. An injection vulnerability exists in E-Commerce-Website-Using-PHP version 1.0, which stems from the fact that incorrect manipulation of the parameter pcat can lead to SQL injection...
CVE-2024-9149
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...
CVE-2024-9149
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...
CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...
CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...
CVE-2024-9149
CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...
Wind Media E-Commerce Website Template SQL注入漏洞
Wind Media E-Commerce Website Template is an e-commerce template from Wind Media, Inc. A SQL injection vulnerability exists in Wind Media E-Commerce Website Template versions prior to v1.5, which stems from susceptibility to SQL injection attacks...