CVE-2025-25141

CVE-2025-25141 : WordPress plugin Fami Sales Popup is vulnerable to a PHP Local File Inclusion (LFI) due to improper control of filenames in include/require statements. Affected versions are up to and including 2.0.0. The root cause is unrestricted filename handling that can lead to LFI exposure;...

WordPress plugin Fami Sales Popup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-5951 · Unknown · Fami Sales Popup

Name of the Vulnerable Software and Affected Versions: Fami Sales Popup versions through 2.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...

PT-2025-5885 · Microsoft · Dynamics 365 Sales

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Sales affected versions not specified Description: The issue allows an authorized attacker to elevate privileges over a network through a Server-Side Request Forgery SSRF in Microsoft Dynamics 365 Sales. Recommendations...

Microsoft Dynamics 365 代码问题漏洞

Microsoft Dynamics 365 Sales is a powerful tool designed to streamline and enhance the sales process, providing sales teams with the insights and data to build strong customer relationships and close deals effectively. An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Sales...

Michael Trites Joins Aembit as Senior Vice President of Global Sales

Silver Spring, Maryland, 5th February 2025, CyberNewsWire...

CVE-2024-7947

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-56207

Cross-Site Request Forgery CSRF vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM editionguard-for-woocommerce-ebook-sales-with-drm allows Privilege Escalation.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through = 3.4.2...

CVE-2024-10167

A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-10369

A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addcustcom.php. The manipulation of the argument refno leads to sql injection. The attack can be launched remotely. The...

CVE-2024-10370

A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /addcustind.php. The manipulation of the argument refno leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2024-10165

A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The explo...

CVE-2024-10166

A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2024-10368

A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addstock.php. The manipulation of the argument prodtype leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Dimas Maulana in WordPress Plugin Fami Sales Popup versions = 2.0.0...

CVE-2024-13424

The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwooscajax' AJAX endpoint in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and...

WordPress plugin Ni Sales Commission For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-2165 · WordPress · Ni Sales Commission For Woocommerce

Name of the Vulnerable Software and Affected Versions: Ni Sales Commission For WooCommerce plugin for WordPress versions up to, and including, 1.2.4 Description: The issue is related to unauthorized access due to a missing capability check on the "niwoosc ajax" AJAX endpoint. This allows...

WordPress Ni Sales Commission For WooCommerce plugin <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Commission Update vulnerability

Missing Authorization to Authenticated Subscriber+ Commission Update vulnerability discovered by SOPROBRO in WordPress Plugin Ni Sales Commission For WooCommerce versions = 1.2.4...