Lucene search
K

63 matches found

RedhatCVE
RedhatCVE
added 2026/04/13 7:24 p.m.1 views

CVE-2026-39656

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.2 views

EUVD-2026-20322

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.9AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.1 views

CVE-2026-39656

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.3CVSS0.0004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.19 views

CVE-2026-39656 WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.3CVSS0.0004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39656

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.9AI score0.0004EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.0 views

CVE-2026-39656 WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.8AI score0.0004EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.3 views

CVE-2026-39656

CVE-2026-39656 concerns the WordPress Razorpay for WooCommerce plugin, specifically versions up to and including 4.8.2. The vulnerability is described as a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling an unauthorized exposure due to...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.2 views

WordPress plugin Razorpay for WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.2 views

PT-2026-31219

Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through = 4.8.2...

5.9AI score0.0004EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/20 7:22 a.m.4 views

CVE-2025-14294

The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList function in all versions up to, and including, 4.7.8. This is due to the checkAuthCredentials permission callback always returning true,...

5.3CVSS5.5AI score0.00219EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 7:17 a.m.3 views

CVE-2025-14294

The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList function in all versions up to, and including, 4.7.8. This is due to the checkAuthCredentials permission callback always returning true,...

5.3CVSS0.00219EPSS
Exploits0References5
CVE
CVE
added 2026/02/19 4:36 a.m.10 views

CVE-2025-14294

CVE-2025-14294 : Razorpay for WooCommerce (WordPress) is vulnerable to unauthorized modification of order data due to a broken authentication check in getCouponList() caused by checkAuthCredentials() always returning true. This permits unauthenticated attackers to modify billing/shipping contact ...

5.3CVSS5.6AI score0.00219EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/02/19 4:36 a.m.2 views

CVE-2025-14294 Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification

The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList function in all versions up to, and including, 4.7.8. This is due to the checkAuthCredentials permission callback always returning true,...

5.3CVSS5.6AI score0.00219EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/19 4:36 a.m.23 views

CVE-2025-14294 Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification

The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList function in all versions up to, and including, 4.7.8. This is due to the checkAuthCredentials permission callback always returning true,...

5.3CVSS0.00219EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

WordPress plugin Razorpay for WooCommerce 访问控制错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.3CVSS5.8AI score0.00219EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.5 views

PT-2026-20614

Name of the Vulnerable Software and Affected Versions Razorpay for WooCommerce plugin for WordPress versions through 4.7.8 Description The Razorpay for WooCommerce plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the getCouponList function,...

5.3CVSS5.3AI score0.00219EPSS
Exploits0References7
Patchstack
Patchstack
added 2026/02/18 11:28 p.m.5 views

WordPress Razorpay for WooCommerce plugin <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification vulnerability

Missing Authentication to Unauthenticated Order Modification vulnerability discovered by Marcin Dudek dudekmar - CERT.PL in WordPress Plugin Razorpay for WooCommerce versions = 4.7.8...

5.3CVSS5.5AI score0.00219EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 8:47 a.m.3 views

CVE-2025-23516

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Sale with Razorpay sell-with-razorpay allows Reflected XSS.This issue affects Sale with Razorpay: from n/a through = 1.0...

7.1CVSS5.9AI score0.00112EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-5711

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00112EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-33330

Malicious code in bioql PyPI...

6.1CVSS8.6AI score0.01662EPSS
Exploits0References3
Rows per page
Query Builder