Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-45217

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7...

6.5CVSS5.4AI score0.0006EPSS
Exploits0References1
NVD
NVD
added 2026/05/25 11:16 p.m.8 views

CVE-2026-45217

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7...

6.5CVSS0.0006EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/25 10:29 p.m.6 views

EUVD-2026-31769

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7...

6.5CVSS5.8AI score0.0006EPSS
Exploits0References1
CVE
CVE
added 2026/05/25 10:29 p.m.11 views

CVE-2026-45217

CVE-2026-45217 concerns the WordPress Stripe Payment Gateway for WooCommerce plugin (≤ 5.0.7). Connected sources describe a Broken Authentication vulnerability allowing an Authentication Bypass via an alternate path or channel, enabling Password Recovery Exploitation. Affected component is the St...

6.5CVSS5.8AI score0.0006EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.7 views

PT-2026-43147

Name of the Vulnerable Software and Affected Versions Stripe Payment Gateway for WooCommerce versions prior to 5.0.8 Description An authentication bypass using an alternate path or channel exists in the ThemeHigh Stripe Payment Gateway for WooCommerce, which allows for password recovery...

6.5CVSS5.8AI score0.0006EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/10 2:23 p.m.3 views

CVE-2025-67553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

6.5CVSS6.4AI score0.00029EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 2:23 p.m.1 views

CVE-2025-67556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows Stored XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

5.9CVSS6AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows Stored XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

5.5AI score0.00027EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-67556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows Stored XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

5.9CVSS0.00027EPSS
Exploits0References1
NVD
NVD
added 2025/12/09 4:18 p.m.2 views

CVE-2025-67553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

6.5CVSS0.00029EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.3 views

PT-2025-49927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

6.5CVSS6.4AI score0.00029EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows Stored XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

5.9CVSS6AI score0.00027EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-30567

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00348EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-17109

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00084EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-56257

Malicious code in bioql PyPI...

9.6CVSS9.2AI score0.00195EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/08 11:58 a.m.7 views

CVE-2025-49077

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS5.9AI score0.00084EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 12:15 p.m.11 views

CVE-2025-49077

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS0.00084EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 11:18 a.m.47 views

CVE-2025-49077

CVE-2025-49077: CSRF vulnerability in WordPress plugin Dynamic Pricing and Discount Rules (versions

4.3CVSS5.9AI score0.00084EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 11:18 a.m.6 views

CVE-2025-49077 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through 2.2.9...

4.3CVSS7AI score0.00084EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 11:18 a.m.14 views

CVE-2025-49077 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS0.00084EPSS
Exploits0References1
Rows per page
Query Builder