Lucene search
K

6 matches found

NVD
NVD
added 2022/09/06 6:15 p.m.6 views

CVE-2022-2518

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockistsettingsmain function. This makes it possible for unauthenticated attackers to modify the plugin...

8.8CVSS0.0021EPSS
Exploits0References4
OSV
OSV
added 2022/09/06 6:15 p.m.1 views

CVE-2022-2518

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockistsettingsmain function. This makes it possible for unauthenticated attackers to modify the plugin...

6.1CVSS5.6AI score0.0021EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/09/06 6:15 p.m.1 views

CVE-2022-2518

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockistsettingsmain function. This makes it possible for unauthenticated attackers to modify the plugin...

8.8CVSS6.3AI score0.0021EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2022/09/06 5:18 p.m.4 views

CVE-2022-2518 Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockistsettingsmain function. This makes it possible for unauthenticated attackers to modify the plugin...

8.8CVSS6.3AI score0.0021EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.0 views

WordPress plugin Stockists Manager for Woocommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.1AI score0.0021EPSS
Exploits0References5
Patchstack
Patchstack
added 2022/07/25 12:0 a.m.14 views

WordPress Stockists Manager for Woocommerce plugin <= 1.0.2.1 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS by Yuta Kikuchi in WordPress Stockists Manager for Woocommerce plugin versions = 1.0.2.1. Solution Deactivate and delete. This plugin has been closed as of July 12, 2022 and is not available for download. Thi...

8.8CVSS1.7AI score0.0021EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder