Lucene search
+L

1380 matches found

OSV
OSV
added 2025/01/02 12:15 p.m.6 views

CVE-2023-45101

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n/a through 5.36.0...

4.3CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 11:59 a.m.11 views

CVE-2023-45101 WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce customer-reviews-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n/a through = 5.36.0...

4.3CVSS7.3AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 11:59 a.m.21 views

CVE-2023-45101 WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce customer-reviews-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n/a through = 5.36.0...

4.3CVSS0.00332EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.7 views

PT-2025-1485 · Woocommerce · Customer Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: CusRev Customer Reviews for WooCommerce versions n/a through 5.36.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to...

4.3CVSS8.6AI score0.00332EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.7 views

WordPress plugin Customer Reviews for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS8.3AI score0.00332EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/27 7:15 p.m.14 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

7.5CVSS0.00615EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/27 12:0 a.m.74 views

CVE-2024-50945

CVE-2024-50945 concerns SimplCommerce. A commit (230310c8d7a0408569b292c5a805c459d47a1d8f) exhibits an improper access control in the review submission flow, allowing users to post reviews without confirming product purchase. Affected product: SimplCommerce (review system). Impact stated in sourc...

7.5CVSS6.9AI score0.00615EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/20 12:0 a.m.5 views

PT-2024-34466 · Unknown · Simplcommerce

Name of the Vulnerable Software and Affected Versions: SimplCommerce version 230310c8d7a0408569b292c5a805c459d47a1d8f Description: An improper access control issue exists, allowing users to submit reviews without verifying if they have purchased the product. This issue affects the review system,...

7.5CVSS7AI score0.00615EPSS
SaveExploits0References13
Rapid7 Blog
Rapid7 Blog
added 2024/12/17 2:0 p.m.6 views

Take Command of Your Career: Practicing Self-Advocacy as a Woman in Tech

As the year draws to a close, it’s essential—and often expected—to reflect on our achievements and lessons learned in preparation for annual performance reviews and setting future goals.For women in tech, this reflection period can be an especially powerful tool. The industry often demands that...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/12/09 1:15 p.m.13 views

CVE-2023-49832

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through = 6.10.2...

5.3CVSS0.00485EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/12/09 1:15 p.m.6 views

CVE-2023-30479

Missing Authorization vulnerability in Stamped.io Stamped.io Product Reviews & UGC for WooCommerce stampedio-product-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stamped.io Product Reviews & UGC for WooCommerce: from n/a through = 2.3.2...

5.3CVSS5.8AI score0.00486EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/09 1:15 p.m.11 views

CVE-2023-27625

Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 6.5.0...

4.3CVSS0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 11:31 a.m.27 views

CVE-2023-27625 WordPress Site Reviews plugin <= 6.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 6.5.0...

4.3CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.9 views

CVE-2023-27625 WordPress Site Reviews plugin <= 6.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through = 6.5.0...

4.3CVSS7.3AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:31 a.m.44 views

CVE-2023-27625

CVE-2023-27625 affects WordPress Site Reviews (plugin) versions

4.3CVSS8AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:31 a.m.37 views

CVE-2023-30479

CVE-2023-30479 affects the WordPress plugin Stamped.io Product Reviews & UGC for WooCommerce (

5.3CVSS8.5AI score0.00486EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.20 views

CVE-2023-49832 WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through = 6.10.2...

5.3CVSS0.00485EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.8 views

CVE-2023-49832 WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through = 6.10.2...

5.3CVSS5.1AI score0.00485EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:30 a.m.41 views

CVE-2023-49832

CVE-2023-49832 affects the WordPress Site Reviews plugin, specifically vulnerable

5.3CVSS5.8AI score0.00485EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.10 views

PT-2024-12237 · Stamped.Io · Stamped.Io Product Reviews & Ugc For Woocommerce

Name of the Vulnerable Software and Affected Versions: Stamped.io Product Reviews & UGC for WooCommerce versions 2.3.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels...

5.3CVSS9.5AI score0.00486EPSS
SaveExploits0References3
Rows per page
Query Builder