GHSA-X8VP-GF4Q-MW5J

creationtimestamp| type| source ---|---|--- 2024-11-06 21:10:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113438061792761841...

CVE-2024-51988

creationtimestamp| type| source ---|---|--- 2024-11-06 19:16:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113437611670981901 2024-11-06 21:41:21+00:00| seen| https://t.me/cvedetector/10038...

CVE-2024-8615

creationtimestamp| type| source ---|---|--- 2024-11-06 08:33:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113435082846415816 2024-11-06 10:49:01+00:00| seen| https://t.me/cvedetector/9998 2026-06-19 08:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3momwtcgodi2n...

CVE-2024-6626

creationtimestamp| type| source ---|---|--- 2024-11-06 06:48:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113434669702054980 2024-11-06 06:51:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113434682290505021 2024-11-06 09:08:41+00:00| seen| https://t.me/cvedetector/999...

GHSA-HXF5-99XG-86HW

creationtimestamp| type| source ---|---|--- 2024-11-05 22:09:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113432631517028864...

CVE-2024-51753

creationtimestamp| type| source ---|---|--- 2024-11-05 19:22:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113431972351708222 2024-11-05 22:16:05+00:00| seen| https://t.me/cvedetector/9951...

CVE-2024-10841

creationtimestamp| type| source ---|---|--- 2024-11-05 14:01:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113430712316800351 2024-11-05 16:22:42+00:00| seen| https://t.me/cvedetector/9867...

CVE-2024-9189

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the algwceuvatexemptvatfromadmin function in all versions up to, and including, 2.12.12. This makes it possible for unauthenticated attackers to updat...

WordPress Revolut Gateway for WooCommerce plugin <= 4.17.3 - Missing Authorization to Unauthenticated Order Status Update vulnerability

Missing Authorization to Unauthenticated Order Status Update vulnerability discovered by WordFence in WordPress Plugin Revolut Gateway for WooCommerce versions = 4.17.3...

CVE-2024-8678 Revolut Gateway for WooCommerce <= 4.17.3 - Missing Authorization to Unauthenticated Order Status Update

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions up to, and including, 4.17.3. This makes it possible for unauthenticated attackers to mark orders a...

WordPress Payflex Payment Gateway plugin <= 2.5.0 - Missing Authorization to Order Status Update vulnerability

Missing Authorization to Order Status Update vulnerability discovered by Francesco Carlucci in WordPress Plugin Payflex Payment Gateway versions = 2.5.0...

CVE-2024-6235

creationtimestamp| type| source ---|---|--- 2024-07-10 10:17:47+00:00| published-proof-of-concept| https://t.me/HackingInsights/5523 2024-07-10 21:49:01+00:00| seen| https://t.me/cvedetector/573 2024-07-11 05:53:00+00:00| seen| https://t.me/thehackernews/5237 2025-04-22 21:20:42+00:00| seen|...

CVE-2024-5071 Bookster <= 1.1.0 - Unauthenticated Appointment Status Update

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment the request body to change its status from pending to approved...

CVE-2024-1718 Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers t...

PT-2024-17941 · WordPress · Eventprime – Events Calendar

Name of the Vulnerable Software and Affected Versions: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress versions up to, and including, 3.4.2 Description: The issue allows unauthenticated users to update the status of order payments, making it possible for attackers to...

BIT-MASTODON-2022-48364

The undomarkstatusesassensitive method in app/services/approveappealservice.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive...

CVE-2024-24099

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

PT-2024-20270 · Unknown · Code-Projects Scholars Tracking System

Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue is related to SQL Injection under Employment Status Information Update. This allows for potential exploitation of the system's database. Recommendations: For...

CVE-2023-4639

creationtimestamp| type| source ---|---|--- 2024-02-09 04:11:15+00:00| seen| https://t.me/ctinow/181794 2024-11-17 10:25:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113497810158138244 2024-11-17 12:56:59+00:00| seen| https://t.me/cvedetector/11259...

CVE-2023-1108

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...