CVE-2024-52495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

CVE-2024-52495

CVE-2024-52495 is an SQL Injection vulnerability in WordPress Distance Based Shipping Calculator (Eniture Technology). The Initial Description notes SQL Injection affecting Distance Based Shipping Calculator: from n/a through 2.0.21. Connected sources (Patchstack) indicate WordPress Distance Base...

CVE-2024-52495 WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

PT-2024-35336 · Enituretechnology · Enituretechnology Distance Based Shipping Calculator

Name of the Vulnerable Software and Affected Versions: Eniture Technology Distance Based Shipping Calculator versions n/a through 2.0.21 Description: The issue involves an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL...

WordPress plugin Distance Based Shipping Calculator SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

PT-2024-16976 · WordPress · Additional Order Filters For Woocommerce

Name of the Vulnerable Software and Affected Versions: Additional Order Filters for WooCommerce plugin for WordPress versions up to, and including, 1.21 Description: The issue arises from insufficient input sanitization and output escaping, making it possible for unauthenticated attackers to inje...

WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.23...

WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 is vulnerable to SQL Injection

Software Distance Based Shipping Calculator Type Plugin Vulnerable versions = 2.0.21 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52495 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID c1821da89db4 Credits João Pedro S Alcântara Kinort...

WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv in WordPress Plugin Shipping with Venipak for WooCommerce versions = 1.22.3...

Did security gaps at Antwerp port enable drug smuggling operations?

TL;DR Why hack shipping? For profit. Criminals have been proven to have hacked port systems to bypass security and facilitate drug smuggling. Evidence of hacking? Rarely reported, but cases like MSC and Glencore’s cobalt theft and the incidents at the Port of Antwerp below provide real examples...

CVE-2024-38740

Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO shipping module: from n/a through 3.4.6...

CVE-2024-38740 WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO shipping module: from n/a through 3.4.6...

CVE-2024-38740

CVE-2024-38740 describes a Missing Authorization vulnerability in the WordPress plugin “Packlink PRO shipping module” used by Packlink Shipping S.L. The issue allows exploitation of incorrectly configured access control security levels (Broken Access Control) and affects Packlink PRO shipping mod...

WordPress plugin Packlink PRO shipping module 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-28184 · Packlink · Packlink Pro Shipping Module

Name of the Vulnerable Software and Affected Versions: Packlink PRO shipping module versions 3.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Packlink PRO shipping module, which allows exploitation due to incorrectly configured access control...

CVE-2024-50512

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through = 3.10.2...

CVE-2024-50512

CVE-2024-50512 affects the WordPress plugin Posti Shipping (versions

CVE-2024-50512 WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through = 3.10.2...

CVE-2024-50512 WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through = 3.10.2...

PT-2024-34288 · Posti · Posti Shipping

Name of the Vulnerable Software and Affected Versions: Posti Shipping versions 3.10.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the generation of error messages containing sensitive information. Recommendations: For Posti Shipping versions 3.10.2 an...