2 matches found
CVE-2026-16947: Server-Side Request Forgery (SSRF)
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response, allowing unauthenticated attackers to redirect that request to ...
9.1CVSS6AI score0.0024EPSS
SaveExploits0References2
WordPress plugin Total processing card payments for WooCommerce 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...
6.5CVSS6.9AI score0.00483EPSS
SaveExploits0References1
20