Lucene search
+L

730 matches found

EUVD
EUVD
•added 2026/08/01 6:00 a.m.•26 views

EUVD-2026-51718

The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...

5.8AI score0.01148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/01 6:00 a.m.•62 views

CVE-2026-15244 HUSKY - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view

The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...

0.01148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/01 6:00 a.m.•21 views

CVE-2026-15244 HUSKY - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view

The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...

6.2AI score0.01148EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/01 6:00 a.m.•21 views

CVE-2026-15244

The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...

5.8AI score0.01148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/01 6:00 a.m.•89 views

CVE-2026-15244

The HUSKY WordPress plugin, specifically in versions before 1.4.1 , is vulnerable to a Local File Inclusion (LFI) flaw. The root cause is a failure to sanitize a stored setting value against directory traversal sequences before it is concatenated into a file inclusion path. This vulnerability all...

7.2CVSS6.2AI score0.01148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/01 12:00 a.m.•11 views

CVE-2026-15244: Improper Limitation of a Pathname to a Restricted Directory

The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...

7.2CVSS6AI score0.01148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/01 12:00 a.m.•33 views

PT-2026-67066

The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...

5.8AI score0.01148EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•14 views

Malicious Package

Overview devplatform-nx-husky is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•30 views

GPT Academic Code Issues and Vulnerabilities

GPT Academic is an interface developed by binary-husky developers, designed to provide practical interactions for large language models like GPT/GLM. There are code vulnerabilities in GPT Academic; these vulnerabilities stem from the runinsubprocesswrapperfunc function, which lacks validation of...

9.8CVSS8.5AI score0.01289EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:00 a.m.•21 views

CVE-2020-7800

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions CWE-754 vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot a...

9.8CVSS6.7AI score0.02218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:00 a.m.•22 views

CVE-2020-7802

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions CWE-276 vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SN...

9.8CVSS6.7AI score0.02218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:24 a.m.•24 views

CVE-2023-40334

Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through = 1.3.4.2...

8.8CVSS8.6AI score0.00484EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:55 a.m.•22 views

CVE-2023-40010

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue affects HUSKY – Products Filter for WooCommerce Professional: from n/a through 1.3.4.2...

9.8CVSS8.5AI score0.00588EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:33 a.m.•24 views

CVE-2019-16879

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...

9.8CVSS6.7AI score0.0137EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 1:09 p.m.•22 views

CVE-2025-13110

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woofaddsubscr" function due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/18 9:04 p.m.•25 views

WordPress HUSKY – Products Filter Professional for WooCommerce plugin <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference via 'woofaddsubscr' vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin HUSKY versions = 1.3.7.3...

4.3CVSS6.8AI score0.00316EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/12/18 12:22 p.m.•52 views

CVE-2025-13110 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woofaddsubscr" function due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS0.00316EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/18 12:22 p.m.•28 views

CVE-2025-13110

CVE-2025-13110 affects the HUSKY – Products Filter Professional for WooCommerce (WordPress). It is an Insecure Direct Object Reference via the woof_add_subscr function due to missing validation on a user-controlled key, enabling authenticated attackers with subscriber-level access or higher to cr...

4.3CVSS5.9AI score0.00316EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/18 12:22 p.m.•12 views

CVE-2025-13110 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woofaddsubscr" function due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS5.9AI score0.00316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•23 views

PT-2025-52215

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woof add subscr" function due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.8AI score0.00316EPSS
SaveExploits0References4
Rows per page
Query Builder