Lucene search
+L

54 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/17 12:00 a.m.•0 views

CVE-2024-48022: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SysBasics Shortcode For Elementor Templates allows Stored XSS.This issue affects Shortcode For Elementor Templates: from n/a through 1.0.0...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/04/03 12:00 a.m.•8 views

VulnCheck KEV: CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

10CVSS7.3AI score0.0063EPSS
SaveIn wildExploits0References2
NVD
NVD
•added 2024/03/15 3:15 p.m.•34 views

CVE-2023-51369

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

8.8CVSS4.7AI score0.00263EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/15 3:15 p.m.•15 views

CVE-2023-51369

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

8.8CVSS7.3AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/15 2:19 p.m.•47 views

CVE-2023-51369 WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

4.3CVSS5AI score0.00263EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/15 2:19 p.m.•129 views

CVE-2023-51369

CVE-2023-51369 describes a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin SysBasics Customize My Account for WooCommerce, affecting versions n/a through 1.8.3. Public sources (RH and CN/ENISA references) confirm the issue is CSRF, with remediation guidance recommending upgrad...

8.8CVSS8.6AI score0.00263EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/15 2:19 p.m.•19 views

CVE-2023-51369 WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

4.3CVSS7AI score0.00263EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/15 12:00 a.m.•2 views

CVE-2023-51369: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

8.8CVSS5.8AI score0.00263EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/26 4:27 p.m.•22 views

CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

10CVSS9.6AI score0.0063EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/26 4:27 p.m.•14 views

CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

9.8CVSS7.3AI score0.0063EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/26 4:27 p.m.•19 views

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/26 3:09 p.m.•142 views

CVE-2024-25925

The SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts plugin (WordPress) is vulnerable to an Unrestricted Upload of File with Dangerous Type (Arbitrary File Upload) vulnerability. This flaw affects versions n/a through 3.5.12 . An unauthenticated attacker can exploit this to uplo...

10CVSS8.6AI score0.0063EPSS
SaveIn wildExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/26 12:00 a.m.•0 views

CVE-2024-25925: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

10CVSS5.8AI score0.0063EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/02/20 12:00 a.m.•16 views

WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload

Description The SysBasics Easy Checkout Field Editor, Fees & Discounts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.5.12. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

10CVSS7.9AI score0.0063EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder