Lucene search
+L

22 matches found

RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•14 views

CVE-2025-62151

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

5.3CVSS7AI score0.00334EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•14 views

EUVD-2025-202030

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

6.5AI score0.00334EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•16 views

CVE-2025-62151

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

5.3CVSS0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•38 views

CVE-2025-62151 WordPress Virtuaria PagBank / PagSeguro para Woocommerce plugin <= 3.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

5.3CVSS0.00334EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•27 views

CVE-2025-62151

A Missing Authorization vulnerability exists in the Virtuaria PagBank / PagSeguro para Woocommerce (virtuaria-pagseguro) WordPress plugin, affecting versions up to and including 3.6.3 . The flaw stems from incorrectly configured access control security levels , which could allow for the exploitat...

8.8CVSS6AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•5 views

CVE-2025-62151 WordPress Virtuaria PagBank / PagSeguro para Woocommerce plugin <= 3.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

6AI score0.00334EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-62151: Missing Authorization

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

8.8CVSS6AI score0.00334EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•16 views

PT-2025-49999

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

7AI score0.00334EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•15 views

WordPress plugin Virtuaria PagBank/PagSeguro for Woocommerce has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS5.8AI score0.00334EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/11/28 5:40 a.m.•14 views

WordPress Virtuaria PagBank / PagSeguro para Woocommerce plugin <= 3.6.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Virtuaria PagBank / PagSeguro para Woocommerce versions = 3.6.3...

8.8CVSS5.8AI score0.00334EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-27519

Malicious code in bioql PyPI...

4.9CVSS5.8AI score0.00412EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/09/12 7:11 a.m.•20 views

CVE-2025-10142

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS5.7AI score0.00412EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/10 7:47 a.m.•6 views

SQL Injection

Overview ricardomartins/pagbank-woocommerce is a WooCommerce integration with discount on official rates Affected versions of this package are vulnerable to SQL Injection via the status parameter due to insufficient escaping and lack of proper preparation in the SQL query. An attacker can extract...

6.9CVSS5.7AI score0.00412EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/10 7:15 a.m.•21 views

CVE-2025-10142

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS0.00412EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/09/10 6:38 a.m.•32 views

CVE-2025-10142 PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS0.00412EPSS
SaveExploits0References4
CVE
CVE
•added 2025/09/10 6:38 a.m.•54 views

CVE-2025-10142

The CVE-2025-10142 vulnerability affects the PagBank / PagSeguro Connect para WooCommerce plugin for WordPress. It is a SQL Injection via the status parameter in all versions up to 4.44.3, caused by insufficient escaping and inadequate query preparation. Authenticated attackers with Shop Manager-...

4.9CVSS5.7AI score0.00412EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/09/10 6:38 a.m.•13 views

CVE-2025-10142 PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS5.7AI score0.00412EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/10 12:00 a.m.•8 views

CVE-2025-10142: Improper Neutralization of Special Elements used in an SQL Command

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS5.7AI score0.00412EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/10 12:00 a.m.•17 views

WordPress plugin PagBank/PagSeguro Connect for WooCommerce has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

4.9CVSS5.8AI score0.00412EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/09/09 11:57 p.m.•21 views

WordPress PagBank / PagSeguro Connect plugin <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Moose Love in WordPress Plugin PagBank / PagSeguro Connect versions = 4.44.3...

4.9CVSS5.8AI score0.00412EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder