Lucene search
K

13 matches found

Patchstack
Patchstack
added 2026/04/08 1:0 p.m.2 views

WordPress MultiLoca plugin <= 4.2.15 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Denver Jackson in WordPress Plugin MultiLoca versions = 4.2.15...

5.8AI score
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30956

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00217EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51542

Malicious code in bioql PyPI...

6.5CVSS9.2AI score0.00066EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/09/24 7:8 a.m.3 views

WordPress MultiLoca - WooCommerce Multi Locations Inventory Management plugin <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler' vulnerability

WordPress MultiLoca - WooCommerce Multi Locations Inventory Management plugin = 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlimsettingsajaxhandler' vulnerability discovered by Thái An in WordPress Plugin MultiLoca versions = 4.2.8...

9.8CVSS6.8AI score0.00217EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.1 views

WordPress plugin MultiLoca - WooCommerce Multi Locations Inventory Management 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

9.8CVSS6.1AI score0.00217EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:34 a.m.4 views

CVE-2024-13341

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS7.3AI score0.00066EPSS
Exploits0References1
NVD
NVD
added 2025/02/01 7:15 a.m.11 views

CVE-2024-13341

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS0.00066EPSS
Exploits0References2
OSV
OSV
added 2025/02/01 7:15 a.m.1 views

CVE-2024-13341

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS5.8AI score0.00066EPSS
Exploits0References2
CVE
CVE
added 2025/02/01 6:41 a.m.46 views

CVE-2024-13341

CVE-2024-13341 affects the WordPress plugin “MultiLoca - WooCommerce Multi Locations Inventory Management” (WordPress/WooCommerce). The vulnerability is a SQL Injection via the data-id parameter in all versions up to and including 4.1.11, caused by insufficient escaping and unsafe handling of the...

6.5CVSS6.5AI score0.00066EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/01 6:41 a.m.6 views

CVE-2024-13341 MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6.5AI score0.00066EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/01 6:41 a.m.9 views

CVE-2024-13341 MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS0.00066EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/01 12:0 a.m.1 views

WordPress plugin MultiLoca - WooCommerce Multi Locations Inventory Management SQL注入漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin MultiLoca - WooCommerce Multi Locations Inventory Management A SQL...

6.5CVSS9.1AI score0.00066EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/31 11:37 p.m.4 views

WordPress MultiLoca plugin <= 4.1.11 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Aiden Thái An in WordPress Plugin MultiLoca versions = 4.1.11...

6.5CVSS8.1AI score0.00066EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder