Lucene search
+L

4 matches found

Patchstack
Patchstack
added 2026/02/16 7:50 a.m.11 views

WordPress Product Options and Price Calculation Formulas for WooCommerce - Uni CPO (Premium) plugin <= 4.9.60 - Missing Authorization to Unauthenticated Arbitrary Attachment and Dropbox File Deletion vulnerability

WordPress Product Options and Price Calculation Formulas for WooCommerce - Uni CPO Premium plugin = 4.9.60 - Missing Authorization to Unauthenticated Arbitrary Attachment and Dropbox File Deletion vulnerability discovered by Stefan in WordPress Plugin Uni CPO Premium versions = 4.9.60...

5.8CVSS5.5AI score0.00189EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/12 7:28 p.m.11 views

CVE-2025-13391

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO Premium plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'unicporemovefile' function in all versions up to, and including, 4.9.60. This makes it possible for...

5.8CVSS5.7AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/11 5:16 p.m.9 views

CVE-2025-13391

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO Premium plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'unicporemovefile' function in all versions up to, and including, 4.9.60. This makes it possible for...

5.8CVSS0.00189EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/09/22 10:29 p.m.14 views

WordPress Uni CPO (Premium) plugin <= 4.9.54 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file' vulnerability

Unauthenticated Arbitrary File Upload via 'unicpouploadfile' vulnerability discovered by Ren Voza in WordPress Plugin Uni CPO Premium versions = 4.9.54...

9.8CVSS6.8AI score0.00579EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder