Lucene search
+L

1167 matches found

Vulnrichment
Vulnrichment
added 2025/01/13 1:11 p.m.10 views

CVE-2024-56301 WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eniture Technology Distance Based Shipping Calculator allows Reflected XSS.This issue affects Distance Based Shipping Calculator: from n/a through 2.0.21...

7.1CVSS6.9AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.4 views

PT-2025-3264 · Enituretechnology · Distance Based Shipping Calculator

The vulnerable software is Eniture Technology Distance Based Shipping Calculator, with versions ranging from n/a to 2.0.21. The vulnerability is an improper neutralization of input during web page generation, also known as Cross-site Scripting XSS, which allows reflected XSS attacks. There is a...

7.1CVSS8.9AI score0.00255EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.4 views

WordPress plugin Distance Based Shipping Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

7.1CVSS7.4AI score0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 11:15 a.m.6 views

CVE-2024-11815

The Pósturinn\s Shipping with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the printedmarked and nonprintedmarked parameters in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS0.00434EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/01/09 12:3 a.m.9 views

WordPress Woocommerce check pincode/zipcode for shipping plugin <= 2.0.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Woocommerce check pincode/zipcode for shipping versions = 2.0.4...

6.1CVSS6.4AI score0.00188EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.10 views

PT-2025-1784 · WordPress · Woocommerce Check Pincode/Zipcode For Shipping Plugin

Name of the Vulnerable Software and Affected Versions: Woocommerce check pincode/zipcode for shipping plugin for WordPress versions up to, and including, 2.0.4 Description: The issue is due to missing or incorrect nonce validation, making it possible for unauthenticated attackers to inject...

6.1CVSS6.7AI score0.00188EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.5 views

PT-2025-1693 · WordPress · Pósturinn'S Shipping With Woocommerce

Name of the Vulnerable Software and Affected Versions: The Pósturinn's Shipping with WooCommerce plugin for WordPress versions up to, and including, 1.3.1 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

6.1CVSS6.7AI score0.00434EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.7 views

WordPress plugin Woocommerce check pincode/zipcode for shipping 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Woocommerce...

6.1CVSS8.2AI score0.00188EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.5 views

WordPress plugin Pósturinn Shipping with WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.6AI score0.00434EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/08 11:9 a.m.47 views

CVE-2024-12337

The CVE CVE-2024-12337 affects the WordPress plugin Shipping via Planzer for WooCommerce. It is a Reflected Cross-Site Scripting vulnerability in the processed-ids parameter affecting all versions up to and including 1.0.25. The issue arises from insufficient input sanitization and output escapin...

6.1CVSS6AI score0.00285EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/08 11:9 a.m.12 views

CVE-2024-12337 Shipping via Planzer for WooCommerce <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids

The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘processed-ids’ parameter in all versions up to, and including, 1.0.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6.4AI score0.00285EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/08 4:22 a.m.7 views

WordPress Shipping via Planzer for WooCommerce plugin <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids vulnerability

Reflected Cross-Site Scripting via processed-ids vulnerability discovered by vgo0 in WordPress Plugin Shipping via Planzer for WooCommerce versions = 1.0.25...

6.1CVSS6.3AI score0.00285EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.8 views

WordPress plugin Shipping via Planzer for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.1CVSS7.6AI score0.00285EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/07 6:15 p.m.10 views

CVE-2024-50659

Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html...

6.1CVSS5.8AI score0.0038EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/07 6:15 p.m.12 views

CVE-2024-50658

Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...

9.8CVSS6.2AI score0.00799EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/07 11:15 a.m.4 views

CVE-2024-56290

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows SQL Injection.This issue affects Multiple Shipping And Billing...

9.3CVSS0.00392EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.10 views

CVE-2024-49249

Path Traversal: '.../...//' vulnerability in SMSA Express SMSA Shipping smsa-shipping-official allows Path Traversal.This issue affects SMSA Shipping: from n/a through = 2.3...

8.6CVSS0.00515EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.4 views

CVE-2024-49249 WordPress SMSA Shipping plugin <= 2.3 - Arbitrary File Deletion vulnerability

Path Traversal vulnerability in SMSA Express SMSA Shipping allows Path Traversal.This issue affects SMSA Shipping: from n/a through 2.3...

8.6CVSS6.9AI score0.00515EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.44 views

CVE-2024-49249

CVE-2024-49249 affects the WordPress SMSA Shipping plugin (versions

8.6CVSS5.9AI score0.00515EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 10:49 a.m.21 views

CVE-2024-49249 WordPress SMSA Shipping plugin <= 2.3 - Arbitrary File Deletion vulnerability

Path Traversal: '.../...//' vulnerability in SMSA Express SMSA Shipping smsa-shipping-official allows Path Traversal.This issue affects SMSA Shipping: from n/a through = 2.3...

8.6CVSS0.00515EPSS
SaveExploits0References1
Rows per page
Query Builder