Lucene search
+L

602 matches found

CVE
CVE
added 2025/12/18 12:22 p.m.19 views

CVE-2025-13110

CVE-2025-13110 affects the HUSKY – Products Filter Professional for WooCommerce (WordPress). It is an Insecure Direct Object Reference via the woof_add_subscr function due to missing validation on a user-controlled key, enabling authenticated attackers with subscriber-level access or higher to cr...

4.3CVSS5.4AI score0.00309EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.13 views

PT-2025-52215

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woof add subscr" function due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.8AI score0.00309EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.17 views

WordPress plugin HUSKY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.7AI score0.00309EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/04 12:30 p.m.24 views

CVE-2025-13109

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

4.3CVSS5.8AI score0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/03 1:16 p.m.12 views

CVE-2025-13109

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

4.3CVSS0.00243EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/03 12:29 p.m.6 views

CVE-2025-13109 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

4.3CVSS5.4AI score0.00243EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/03 12:29 p.m.19 views

CVE-2025-13109

CVE-2025-13109 concerns the WordPress plugin HUSKY – Products Filter Professional for WooCommerce (versions

4.3CVSS5.4AI score0.00243EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/03 12:29 p.m.13 views

EUVD-2025-200981

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...

4.3CVSS5.3AI score0.00243EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/03 1:33 a.m.17 views

WordPress HUSKY plugin <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference via 'woofaddquery/woofremovequery' vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin HUSKY versions = 1.3.7.2...

4.3CVSS6.8AI score0.00243EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/03 12:00 a.m.16 views

PT-2025-48805

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woof add query" and "woof remove query" functions due to missing validation on a user controlled key. This makes i...

4.3CVSS5.8AI score0.00243EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/03 12:00 a.m.12 views

WordPress plugin HUSKY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.3AI score0.00243EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/25 12:16 a.m.6 views

EUVD-2025-199409

Malicious code in @voiceflow/husky-config npm...

6.6AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/25 12:16 a.m.12 views

Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2025/11/25 12:16 a.m.6 views

MAL-2025-191353 Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References4
EUVD
EUVD
added 2025/11/13 3:23 a.m.10 views

EUVD-2025-175689

Malicious code in vortex-husky-sqlite-exobiology npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-179037

Malicious code in eslint-plugin-husky-pavo-virgo npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.7 views

EUVD-2025-176347

Malicious code in slides-convict-husky-kaus npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.11 views

EUVD-2025-180188

Malicious code in await-husky-electron-builder-superagent npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.10 views

EUVD-2025-177646

Malicious code in neptunology-husky-dotenv-parse-variables-got npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/13 3:23 a.m.6 views

EUVD-2025-180155

Malicious code in backend-exec-husky-public npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder