Lucene search
K

21 matches found

EUVD
EUVD
added 2025/12/16 9:31 a.m.1 views

EUVD-2025-203591

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

5.3CVSS6.5AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.0 views

CVE-2025-64638

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

5.3CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.3 views

CVE-2025-64638

CVE-2025-64638 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin OnPay.io for WooCommerce (versions up to and including 1.0.47). The root cause is "Incorrectly Configured Access Control Security Levels" (lacking proper authorization). Impact details are not ...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.25 views

CVE-2025-64638 WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

5.3CVSS0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51407

Name of the Vulnerable Software and Affected Versions OnPay.io for WooCommerce versions through 1.0.47 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is present in OnPay.io for...

5.3CVSS6.5AI score0.00038EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/29 9:36 a.m.3 views

WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin OnPay.io for WooCommerce versions = 1.0.47...

5.3CVSS7AI score0.00038EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-6672

Malware in sbrugna...

4.3CVSS4.8AI score0.00332EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 7:12 a.m.7 views

CVE-2017-15212

In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user...

4.3CVSS6.7AI score0.00332EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:38 a.m.6 views

CVE-2017-15205

In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user...

4.3CVSS6.7AI score0.00294EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/06/04 7:15 a.m.1 views

CVE-2024-5485

The SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Trigger Link shortcode in all versions up to, and including, 1.0.47 due to insufficient input sanitization and output escaping on user...

6.4CVSS6.1AI score0.0038EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:34 a.m.0 views

SUSE CVE-2013-6476

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file...

4.4CVSS7AI score0.00303EPSS
Exploits1References3
OSV
OSV
added 2022/03/21 7:15 p.m.1 views

CVE-2022-0616

The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack...

4.3CVSS5.9AI score0.00103EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.1 views

WordPress plugin Amelia 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability previously exist...

6.1CVSS6.1AI score0.0021EPSS
Exploits2References2
OSV
OSV
added 2021/06/01 2:15 p.m.1 views

CVE-2021-24316

The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue...

6.1CVSS6.4AI score
Exploits0References3
CNVD
CNVD
added 2017/10/10 12:0 a.m.1 views

Kanboard Design Vulnerability (CNVD-2017-30952)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.00487EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/10 12:0 a.m.1 views

Kanboard Design Vulnerability (CNVD-2017-30937)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.00332EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/10 12:0 a.m.1 views

Kanboard Design Vulnerability (CNVD-2017-30953)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.00487EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/10 12:0 a.m.1 views

Kanboard Design Vulnerability (CNVD-2017-30946)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.00543EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/10 12:0 a.m.1 views

Kanboard Design Vulnerability (CNVD-2017-30944)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.00294EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/10 12:0 a.m.1 views

Kanboard Design Vulnerability (CNVD-2017-30940)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.00472EPSS
Exploits0References1
Rows per page
Query Builder