Lucene search
+L

1834 matches found

CNNVD
CNNVD
added 2025/01/15 12:00 a.m.8 views

WordPress plugin WR Price List Manager For Woocommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in t...

9.9CVSS8.3AI score0.0051EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/13 8:22 p.m.11 views

WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WR Price List Manager For Woocommerce versions = 1.0.8...

9.9CVSS7.5AI score0.0051EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/09 4:16 p.m.13 views

CVE-2025-22510

Deserialization of Untrusted Data vulnerability in kkarpieszuk WC Price History for Omnibus wc-price-history allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through = 2.1.4...

7.2CVSS0.01225EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/01/09 3:39 p.m.13 views

CVE-2025-22510 WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Konrad Karpieszuk WC Price History for Omnibus allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through 2.1.4...

7.2CVSS7.2AI score0.01225EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.10 views

PT-2025-4503 · Konrad Karpieszuk · Wc Price History For Omnibus

Name of the Vulnerable Software and Affected Versions: Konrad Karpieszuk WC Price History for Omnibus versions n/a through 2.1.4 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially lead to security breaches...

7.2CVSS7.4AI score0.01225EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.10 views

WordPress plugin WC Price History for Omnibus 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS8.4AI score0.01225EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/01/08 1:02 a.m.232 views

Exploit for CVE-2025-22510

CVE-2025-22510 1️⃣ Component type WordPress plugin 2️...

7.2CVSS9.7AI score0.01225EPSS
SaveExploits1
NVD
NVD
added 2025/01/07 5:15 p.m.29 views

CVE-2025-22500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Ali Alpha Price Table For Elementor alpha-price-table-for-elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through = 1.2.0...

6.5CVSS0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 4:50 p.m.9 views

CVE-2025-22500 WordPress Alpha Price Table For Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Ali Alpha Price Table For Elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through 1.0.8...

6.5CVSS7.2AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 4:50 p.m.75 views

CVE-2025-22500

CVE-2025-22500 is a DOM-based XSS vulnerability in the Alpha Price Table For Elementor plugin. The CVE description states it affects Alpha Price Table For Elementor versions from n/a up to 1.2.0, due to improper input neutralization during web page generation. Wordfence data lists the CVE as curr...

6.5CVSS7.2AI score0.00246EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 4:50 p.m.44 views

CVE-2025-22500 WordPress Alpha Price Table For Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Ali Alpha Price Table For Elementor alpha-price-table-for-elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through = 1.2.0...

6.5CVSS0.00246EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 2:09 p.m.11 views

WordPress Alpha Price Table For Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin Alpha Price Table For Elementor versions = 1.2.0...

6.5CVSS8.3AI score0.00246EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/07 1:47 p.m.13 views

WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin WC Price History for Omnibus versions = 2.1.4...

7.2CVSS7.3AI score0.01225EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.8 views

WordPress plugin Alpha Price Table For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.7AI score0.00246EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/24 5:15 a.m.14 views

CVE-2024-12617

The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and...

5.4CVSS0.00304EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/24 4:22 a.m.16 views

CVE-2024-12617 WC Price History for Omnibus <= 2.1.3 - Missing Authorization

The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and...

5.4CVSS6.5AI score0.00304EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/24 4:22 a.m.50 views

CVE-2024-12617

CVE-2024-12617 affects WC Price History for Omnibus (WordPress). The issue is a missing capability check on several AJAX actions, permitting authenticated users with Subscriber level and above to view and modify history data. This is confirmed by Red Hat/Wordfence references noting the WC Price H...

5.4CVSS5.2AI score0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/24 12:00 a.m.6 views

WordPress plugin WC Price History for Omnibus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.2AI score0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/24 12:00 a.m.7 views

PT-2024-17675 · WordPress · Wc Price History For Omnibus

Name of the Vulnerable Software and Affected Versions: WC Price History for Omnibus plugin for WordPress versions up to, and including, 2.1.3 Description: The issue is related to unauthorized access due to a missing capability check on several AJAX actions. This allows authenticated attackers wit...

5.4CVSS9.1AI score0.00304EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/12/23 5:37 p.m.7 views

WordPress WC Price History for Omnibus plugin <= 2.1.3 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin WC Price History for Omnibus versions = 2.1.3...

5.4CVSS7AI score0.00304EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder