CVE-2025-31794

Technical details for CVE-2025-31794 are not provided in the connected documents. The supplied materials mention a Missing Authorization issue affecting WR Price List Manager For Woocommerce up to v1.0.8, but no concrete exploit, affected build(s), root cause, impact, or fix is documented here.

WordPress plugin WR Price List Manager For Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

PT-2025-14736 · WordPress · Wr Price List Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: WR Price List Manager For Woocommerce versions 1.0.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

CVE-2024-10472

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Stylish Price List plugin < 7.1.12 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Stylish Price List versions 7.1.12...

CVE-2024-10472

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10472 Stylish Price List < 7.1.12 - Contributor+ Stored XSS

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10472 Stylish Price List < 7.1.12 - Contributor+ Stored XSS

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

PHPGurukul Bank Locker Management System 注入漏洞

PHPGurukul Bank Locker Management System is a bank locker management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Bank Locker Management System, which stems from the fact that incorrect manipulation of the parameter lockerprice can lead to SQL injecti...

CVE-2025-28891

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

WordPress price-calc plugin <= 0.6.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin price-calc versions = 0.6.3...

CVE-2025-28891

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

CVE-2025-28891

CVE-2025-28891 affects the WordPress price-calc plugin (versions

CVE-2025-28891 WordPress price-calc plugin <= 0.6.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in jazzigor price-calc price-calc allows Stored XSS.This issue affects price-calc: from n/a through = 0.6.3...

WordPress plugin price-calc 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-26994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite zigaform-calculator-cost-estimation-form-builder-lite allows Stored XSS.This issue affects Zigaform – Price Calculator &...

CVE-2025-26994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite allows Stored XSS. This issue affects Zigaform – Price Calculator & Cost Estimation Form Builder Lite: from n/a through...

CVE-2025-26994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite zigaform-calculator-cost-estimation-form-builder-lite allows Stored XSS.This issue affects Zigaform – Price Calculator &...

CVE-2025-26994

CVE-2025-26994 is a stored XSS vulnerability in the WordPress plugin Zigaform – Price Calculator & Cost Estimation Form Builder Lite (

CVE-2025-26994 WordPress Zigaform – Price Calculator & Cost Estimation Form Builder Lite plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite zigaform-calculator-cost-estimation-form-builder-lite allows Stored XSS.This issue affects Zigaform – Price Calculator &...