Lucene search
+L

2146 matches found

Positive Technologies
Positive Technologies
•added 2025/11/21 12:00 a.m.•22 views

PT-2025-47777

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in MatrixAddons Easy Invoice easy-invoice allows PHP Local File Inclusion.This issue affects Easy Invoice: from n/a through = 2.1.4...

7.1AI score0.00406EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•2 views

CVE-2025-66115: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in MatrixAddons Easy Invoice easy-invoice allows PHP Local File Inclusion.This issue affects Easy Invoice: from n/a through = 2.1.4...

6.6CVSS5.8AI score0.00406EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•20 views

WordPress WooCommerce PDF Invoice Builder plugin missing license vulnerability

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

4.3CVSS6.8AI score0.00192EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/14 10:11 a.m.•25 views

CVE-2025-64269

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS7AI score0.00192EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/11/14 3:49 a.m.•16 views

WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin WooCommerce PDF Invoice Builder versions = 1.2.150...

4.3CVSS6.7AI score0.00192EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/11/13 12:31 p.m.•13 views

EUVD-2025-163778

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS6.4AI score0.00192EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/13 10:15 a.m.•12 views

CVE-2025-64269

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/13 9:24 a.m.•18 views

CVE-2025-64269 WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS0.00192EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/13 9:24 a.m.•31 views

CVE-2025-64269

The CVE-2025-64269 entry pertains to the WordPress plugin WooCommerce PDF Invoice Builder (plugin versions

4.3CVSS6.6AI score0.00192EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/13 9:24 a.m.•6 views

CVE-2025-64269 WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS6.6AI score0.00192EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/13 12:00 a.m.•1 views

CVE-2025-64269: Missing Authorization

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS5.9AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•14 views

WordPress plugin WooCommerce PDF Invoice Builder 安全漏洞

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

4.3CVSS6.4AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/13 12:00 a.m.•17 views

PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...

6.6AI score0.00192EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/11/10 12:22 p.m.•27 views

CVE-2025-12918

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

5.3CVSS6.3AI score0.00374EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2025/11/09 9:30 a.m.•16 views

Skuul School Management System has an Insecure Direct Object Reference (IDOR) Vulnerability in View Fee Invoice

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

5.3CVSS6.5AI score0.00374EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2025/11/09 9:30 a.m.•18 views

GHSA-FQQ7-H225-8W6H Skuul School Management System has an Insecure Direct Object Reference (IDOR) Vulnerability in View Fee Invoice

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

3.1CVSS6.4AI score0.00374EPSS
SaveExploits1References7
Snyk
Snyk
•added 2025/11/09 8:39 a.m.•6 views

Resource Injection

Overview yungifez/skuul is an A multi school management system. Affected versions of this package are vulnerable to Resource Injection via the invoiceid parameter in the /dashboard/fees/fee-invoices/. A user can access unauthorized resources by manipulating this parameter remotely. Remediation...

5.3CVSS4.5AI score0.00374EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/09 8:15 a.m.•14 views

CVE-2025-12918

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

5.3CVSS5.2AI score0.00374EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/09 8:15 a.m.•19 views

CVE-2025-12918

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

5.3CVSS0.00374EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/09 8:02 a.m.•3 views

CVE-2025-12918 yungifez Skuul School Management System View Fee Invoice fee-invoices resource injection

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

3.1CVSS6.1AI score0.00374EPSS
SaveExploits1References5
Rows per page
Query Builder