PT-2025-2165 · WordPress · Ni Sales Commission For Woocommerce

Name of the Vulnerable Software and Affected Versions: Ni Sales Commission For WooCommerce plugin for WordPress versions up to, and including, 1.2.4 Description: The issue is related to unauthorized access due to a missing capability check on the "niwoosc ajax" AJAX endpoint. This allows...

WordPress Ni Sales Commission For WooCommerce plugin <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Commission Update vulnerability

Missing Authorization to Authenticated Subscriber+ Commission Update vulnerability discovered by SOPROBRO in WordPress Plugin Ni Sales Commission For WooCommerce versions = 1.2.4...

CVE-2025-23452

CVE-2025-23452 is a reflected cross-site scripting (XSS) vulnerability in EditionGuard for WooCommerce – eBook Sales with DRM, affecting versions from n/a through 3.4.2. The issue arises from improper neutralization of input during web page generation. According to the CVSS 3.1 vector, it has a b...

CVE-2025-23452 WordPress EditionGuard for WooCommerce plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM editionguard-for-woocommerce-ebook-sales-with-drm allows Reflected XSS.This issue affects EditionGuard for WooCommerce – eBook Sales...

WordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin DX Sales CRM versions = 1.1...

WordPress Ni WooCommerce Sales Report Email plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Ni WooCommerce Sales Report Email versions = 3.1.4...

WordPress EditionGuard for WooCommerce plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin EditionGuard for WooCommerce – eBook Sales with DRM versions = 3.4.2...

Top 5 Malware Threats to Prepare Against in 2025

2024 had its fair share of high-profile cyber attacks, with companies as big as Dell and TicketMaster falling victim to data breaches and other infrastructure compromises. In 2025, this trend will continue. So, to be prepared for any kind of malware attack, every organization needs to know its...

CVE-2024-12416

The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotivseenproducts.' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

WordPress Woomotiv plugin <= 3.6.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Frissi0n in WordPress Plugin Live Sales Notification for Woocommerce - Woomotiv versions = 3.6.1...

CVE-2025-0201

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-0201

CVE-2025-0201 affects code-projects Point of Sales and Inventory Management System 1.0. A vulnerability in /user/update_account.php allows SQL injection through the username parameter. Exploitation is remote, and public disclosures exist. The available sources do not provide a confirmed patch or ...

CVE-2025-0201 code-projects Point of Sales and Inventory Management System update_account.php sql injection

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-0201 code-projects Point of Sales and Inventory Management System update_account.php sql injection

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-0200

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /user/searchnum.php. The manipulation of the argument search leads to sql injection. The attack can...

CVE-2025-0200

CVE-2025-0200 affects the code-projects Point of Sales and Inventory Management System 1.0. The vulnerability is an SQL injection in the unknown functionality of the /user/search_num.php page, triggered by manipulating the search argument. Exploitation is described as remote and the exploit has b...

CVE-2025-0200 code-projects Point of Sales and Inventory Management System search_num.php sql injection

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /user/searchnum.php. The manipulation of the argument search leads to sql injection. The attack can...

PT-2025-3773 · Unknown · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /user/search num.php. The manipulation of the search argument...

CVE-2025-0199

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minuscart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

CVE-2025-0199

CVE-2025-0199 affects code-projects Point of Sales and Inventory Management System 1.0, with an SQL injection in /user/minus_cart.php triggered by manipulating the id parameter. The vulnerability is described as remote-exploitable and publicly disclosed. Connected sources (NVD, Red Hat, CVE listi...