WordPress New Order Notification for Woocommerce plugin <= 2.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin New Order Notification for Woocommerce versions = 2.0.2...

WordPress New Order Notification for Woocommerce Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software New Order Notification for Woocommerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31098 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f43459ca9b98 Credits...

WordPress New Order Notification Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software New Order Notification Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f85602c77d34 Credits Rafie Muhammad Patchstack...

Shopify: staffOrderNotificationSubscriptionDelete Could Be Used By Staff Member With Settings Permission

Hi, The staff order notification should be under the control of staff members with Order permission but I found that the staff member with just Settings permission can also delete the order notifications using the GID Steps to reproduce - Login as a staff member with Settings permission - Make th...

Threat Outbreak Alert: Fake Online Purchase Email Messages on December 27, 2013

Medium Alert ID: 32293 First Published: 2014 January 2 18:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an online purchase order notification from Amazon for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Product Order Email Messages on November 14, 2013

Medium Alert ID: 31712 First Published: 2013 November 11 19:47 GMT Last Updated: 2013 November 15 16:11 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the emai...

Threat Outbreak Alert: Fake Product Offering Notice Email Messages on October 18, 2013

Medium Alert ID: 31361 First Published: 2013 October 18 13:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on June 15, 2013

Medium Alert ID: 29677 First Published: 2013 June 17 12:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order for the recipient. The text in the email message attempts to convince the recipient to open the...

CVE-2005-1732

Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi...

CVE-2005-1732

Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi...

CVE-2005-1732

Cookie Cart is affected by CVE-2005-1732 where remote attackers can read the Order Notification list through the testmycgi and path parameters to testmy.cgi. The available sources confirm this access path but do not specify affected versions, patches, or exact root cause details beyond the parame...