Lucene search
+L

41 matches found

CVE
CVE
•added 2025/06/06 11:18 a.m.•85 views

CVE-2025-49077

CVE-2025-49077: CSRF vulnerability in WordPress plugin Dynamic Pricing and Discount Rules (versions

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 11:18 a.m.•30 views

CVE-2025-49077 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 11:18 a.m.•16 views

CVE-2025-49077 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through 2.2.9...

4.3CVSS7AI score0.0014EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•7 views

CVE-2025-49077: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•27 views

PT-2025-24073 · Themehigh · Themehigh Dynamic Pricing/Discount Rules

Name of the Vulnerable Software and Affected Versions: ThemeHigh Dynamic Pricing and Discount Rules versions 2.2.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This can lead to security breaches where an...

4.3CVSS4.5AI score0.0014EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 2:18 a.m.•18 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS8.5AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:08 a.m.•16 views

CVE-2024-32781

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0...

7.5CVSS5.2AI score0.0068EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:16 p.m.•18 views

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS6.8AI score0.0059EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 4:15 p.m.•48 views

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS0.0059EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/10 4:15 p.m.•13 views

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/10 3:45 p.m.•24 views

CVE-2024-35658 WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

8.6CVSS6.9AI score0.0059EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 3:45 p.m.•91 views

CVE-2024-35658

CVE-2024-35658: Path Traversal vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows unauthenticated file deletion. Affected: Checkout Field Editor for WooCommerce (Pro) up to version 3.6.2. Root cause: improper limitation of a pathname to restricted directories. Remediati...

9.1CVSS9AI score0.0059EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•5 views

CVE-2024-35658: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/24 8:15 a.m.•31 views

CVE-2024-32781

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0...

7.5CVSS7.5AI score0.0068EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•9 views

CVE-2024-32781: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0...

7.5CVSS5.8AI score0.0068EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/29 1:15 p.m.•18 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

8.8CVSS7.3AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/29 1:15 p.m.•32 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS0.0027EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/29 1:15 p.m.•31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

6.8CVSS7.2AI score0.0027EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/29 12:48 p.m.•44 views

CVE-2023-51545 WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS9.5AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/29 12:48 p.m.•97 views

CVE-2023-51545

CVE-2023-51545 affects the WordPress plugin "Job Manager & Career – Manage job board listings, and recruitments" (ThemeHigh). Description in connected docs indicates a Cross-Site Request Forgery leading to PHP object injection, impacting versions up to 1.4.4 (no specific vulnerable version range ...

9.6CVSS8.5AI score0.0027EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder