Lucene search
+L

108 matches found

WPVulnDB
WPVulnDB
added 2024/02/26 12:00 a.m.19 views

SMS Alert Order Notifications – WooCommerce < 3.7.0 - Cross-Site Request Forgery

Description The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.9. This is due to missing or incorrect nonce validation on the processBulkAction function. This makes it possible for...

4.3CVSS6.6AI score0.00239EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/09/08 12:00 a.m.61 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-70735)

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress plugin, which stems from a cross-site scripting XSS vulnerability in the settings page of the SMS Alert Order Notifications...

6.1CVSS1.5AI score0.00827EPSS
SaveExploits2References1
OSV
OSV
added 2021/09/06 11:15 a.m.7 views

CVE-2021-24588

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...

6.1CVSS5.9AI score0.00827EPSS
SaveExploits2References1
NVD
NVD
added 2021/09/06 11:15 a.m.25 views

CVE-2021-24588

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...

6.1CVSS0.00827EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/09/06 11:15 a.m.5 views

CVE-2021-24588

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...

6.1CVSS5.9AI score0.00827EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2021/09/06 11:09 a.m.33 views

CVE-2021-24588 SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...

6.2AI score0.00827EPSS
SaveExploits2References1
CVE
CVE
added 2021/09/06 11:09 a.m.72 views

CVE-2021-24588

The WordPress plugin SMS Alert Order Notifications – WooCommerce (versions before 3.4.7) is affected by an authenticated cross-site scripting (XSS) vulnerability in the settings page. CVE-2021-24588 documents an XSS with a CVSS v3.1 base score of 6.1. Remediation: upgrade to version 3.4.7 or late...

6.1CVSS6AI score0.00827EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2021/08/02 12:00 a.m.31 views

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.4.6 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability discovered by Swapnil Bodekar in WordPress SMS Alert Order Notifications – WooCommerce plugin versions = 3.4.6. Solution Update the WordPress SMS Alert Order Notifications – WooCommerce plugin to the latest available version at least 3.4.7...

6.1CVSS2.3AI score0.00827EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder