CVE-2023-7188

CVE-2023-7188 affects Shipping 100 Fahuo100 up to version 1.1. The vulnerability is in an unknown function in the file member/login.php where manipulation of the argument M_pwd leads to an SQL injection . Reported impact is high across confidentiality, integrity, and availability. Multiple connec...

PT-2023-32932 · Unknown · Shipping 100 Fahuo100

Name of the Vulnerable Software and Affected Versions: Shipping 100 Fahuo100 versions up to 1.1 Description: A critical vulnerability has been found in Shipping 100 Fahuo100. The issue affects an unknown function of the file member/login.php. The manipulation of the argument M pwd leads to sql...

Shipping 100 Fahuo100 Security Breach

100% SPEEDLAB Shipping 100 Fahuo100 is a courier shipping software from 100% SPEEDLAB. A security vulnerability exists in Shipping 100 Fahuo100 version 1.1 and prior versions, which stems from a problem with an unknown function in member/login.php...

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin <= 4.2.1 is vulnerable to Privilege Escalation

Software WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.3.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51546 Patch priority Medium CVSS severity Medium...

WordPress WooCommerce Shipping Per Product Plugin <= 2.5.4 is vulnerable to Broken Access Control

Software WooCommerce Shipping Per Product Type Plugin Vulnerable versions = 2.5.4 Fixed in 2.5.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51499 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 08c4c7d68a1f Credits Rafie...

WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Broken Access Control

Software WooCommerce Canada Post Shipping Type Plugin Vulnerable versions = 2.8.3 Fixed in 2.8.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51498 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 5ac6b8eb5c23 Credits Rafie...

CVE-2023-32799

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3...

CVE-2023-32799

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3...

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3...

CVE-2023-32799

CVE-2023-32799 affects the WordPress WooCommerce Ship to Multiple Addresses plugin (

PT-2023-24032 · Woocommerce · Woocommerce Shipping Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses versions 3.8.3 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For...

CVE-2023-47789

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...

CVE-2023-47789

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...

CVE-2023-47789 WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...

CVE-2023-47789

CVE-2023-47789 is a CSRF vulnerability in the WordPress WooCommerce Canada Post Shipping Plugin (

WordPress Plugin Canada Post Shipping Method Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Plugin Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Biteship:...

CVE-2023-5325

The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS...

PT-2023-32044 · WordPress · Woocommerce Vietnam Checkout

Name of the Vulnerable Software and Affected Versions: WooCommerce Vietnam Checkout WordPress plugin versions prior to 2.0.6 Description: The issue concerns the WooCommerce Vietnam Checkout WordPress plugin, where the custom shipping phone field on the checkout form is not properly escaped, leadi...