39 matches found
CVE-2016-10920
The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...
CVE-2017-18572
The gnucommerce plugin before 1.4.2 for WordPress has XSS...
EUVD-2017-9688
Malware in sbrugna...
EUVD-2025-10944
Malicious code in bioql PyPI...
EUVD-2025-8170
Malicious code in bioql PyPI...
CVE-2025-30985
Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-30985
Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-30985
CVE-2025-30985 involves Deserialization of Untrusted Data in the GNUCommerce WordPress plugin, enabling PHP Object Injection. Affected: GNUCommerce versions n/a through 1.5.4. CVSSv3.1 base score 9.8 (CRITICAL). Exploitation status not provided in the connected documents; no remediation details a...
CVE-2025-30985 WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-30985 WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...
WordPress plugin GNUCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
PT-2025-16330
Name of the Vulnerable Software and Affected Versions GNUCommerce versions 1.5.4 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a critical issue that affects GNUCommerce. Recommendations For versions 1.5.4 and earlier,...
CVE-2025-30985: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-26564
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-26564
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-26564
CVE-2025-26564 affects the WordPress GNUCommerce plugin (versions
CVE-2025-26564 WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...
CVE-2025-26564: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...
WordPress plugin GNUCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-12920
Name of the Vulnerable Software and Affected Versions kagla GNUCommerce versions 1.5.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions 1.5.4 an...