CVE-2022-0783

The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections...

Sql injection

The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections...

CVE-2022-0783

CVE-2022-0783 affects the WordPress plugin "Multiple Shipping Address Woocommerce" (pre-2.0). The issue is improper sanitization/escaping of numerous parameters in SQL statements executed by certain AJAX actions accessible to unauthenticated users, leading to unauthenticated SQL injections. Impac...

WordPress plugin Multiple Shipping Address Woocommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The vulnerability stems from a failure to validate, clean up, and escape various user inputs before using...

WordPress Flat Rate Shipping Plugin For WooCommerce plugin <= 4.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Flat Rate Shipping Plugin For WooCommerce plugin versions = 4.0.2. Solution Update the WordPress Flat Rate Shipping Plugin For WooCommerce plugin to the latest available version at least 4.0.3...

WordPress Hide Shipping Method For WooCommerce plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Hide Shipping Method For WooCommerce plugin versions = 1.3.0. Solution Update the WordPress Hide Shipping Method For WooCommerce plugin to the latest available version at least 1.3.1...

WordPress Product Shipping Countdown Free plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Product Shipping Countdown Free plugin versions = 1.0.6. Solution No patched version available...

WordPress Flat Rate Shipping Plugin For WooCommerce plugin <= 4.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Flat Rate Shipping Plugin For WooCommerce plugin versions = 4.0.2. Solution Update the WordPress Flat Rate Shipping Plugin For WooCommerce plugin to the latest available version at least 4.0.3...

WordPress Product Shipping Countdown Free plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Product Shipping Countdown Free plugin versions = 1.0.6. Solution No patched version available...

WordPress Shipping Manager For WooCommerce plugin < 1.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Shipping Manager For WooCommerce plugin versions 1.3.0. Solution Update the WordPress Shipping Manager For WooCommerce plugin to the latest available version at least 1.3.0...

WordPress Mojito Shipping plugin <= 1.3.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Mojito Shipping plugin versions = 1.3.8. Solution Update the WordPress Mojito Shipping plugin to the latest available version at least 1.3.9...

WordPress Shipping Method Display Style for WooCommerce plugin <= 3.7.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Shipping Method Display Style for WooCommerce plugin versions = 3.7.4. Solution Update the WordPress Shipping Method Display Style for WooCommerce plugin to the latest available version at least 3.7.5...

WordPress Shipping Manager For WooCommerce plugin < 1.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Shipping Manager For WooCommerce plugin versions 1.3.0. Solution Update the WordPress Shipping Manager For WooCommerce plugin to the latest available version at least 1.3.0...

WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin < 2.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin versions 2.0.4. Solution Update the WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin to the latest available version at least 2.0.4...

WordPress Mojito Shipping plugin <= 1.3.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mojito Shipping plugin versions = 1.3.8. Solution Update the WordPress Mojito Shipping plugin to the latest available version at least 1.3.9...

WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin < 2.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin versions 2.0.4. Solution Update the WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin to the latest available version at least 2.0.4...

Cybercriminals Love Supply-Chain Chaos: Here’s How to Protect Your Inbox

Over the last couple of months, the Zix Threat Research team has observed threat actors using new tactics to spoof logistics and supply-chain companies, hoping for an easy compromise. As we have seen throughout the COVID-19 pandemic, cybercriminals are flourishing in these times of upheaval, due ...

Unisys Cargo Mobile Information Disclosure Vulnerability

Unisys Cargo Mobile is a shipping solution from Unisys, Inc. An information disclosure vulnerability exists in the Unisys Cargo Mobile Application prior to 1.2.29. The vulnerability stems from the use of plaintext storage of sensitive information, which could be exploited by an attacker to obtain...

Oracle Shipping Execution Information Disclosure Vulnerability (CNVD-2025-02855)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An information disclosure vulnerability exists in...

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...