Lucene search
K

15 matches found

Cvelist
Cvelist
added 2026/06/15 8:19 p.m.27 views

CVE-2026-52700 WordPress WCMultiShipping plugin <= 3.0.2 - SQL Injection vulnerability

Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...

8.5CVSS0.00339EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/15 8:19 p.m.6 views

CVE-2026-52700 WordPress WCMultiShipping plugin <= 3.0.2 - SQL Injection vulnerability

Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...

8.5CVSS5.7AI score0.00339EPSS
Exploits0References1
CVE
CVE
added 2026/06/15 8:19 p.m.16 views

CVE-2026-52700

WordPress plugin WCMultiShipping (versions

8.5CVSS5.7AI score0.00339EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.11 views

PT-2026-49523

Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...

8.5CVSS5.7AI score0.00339EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/06/10 9:35 a.m.5 views

WordPress WCMultiShipping plugin <= 3.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by ParkHyunWoo in WordPress Plugin WCMultiShipping versions = 3.0.2...

8.5CVSS5.9AI score0.00339EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-52341

Malicious code in bioql PyPI...

6.5CVSS9AI score0.00467EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:10 a.m.5 views

CVE-2023-48274

Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5...

6.5CVSS8.5AI score0.00467EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.20 views

CVE-2023-48274

Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5...

6.5CVSS0.00467EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.8 views

CVE-2023-48274 WordPress WCMultiShipping plugin <= 2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5...

6.5CVSS6.9AI score0.00467EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.21 views

CVE-2023-48274 WordPress WCMultiShipping plugin <= 2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5...

6.5CVSS0.00467EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.5 views

PT-2024-13568 · Woocommerce · Mondial Relay Woocommerce - Wcmultishipping

Name of the Vulnerable Software and Affected Versions: Mondial Relay WooCommerce - WCMultiShipping versions through 2.3.5 Description: The issue affects the WCMultiShipping plugin due to missing authorization, allowing exploitation of incorrectly configured access control security levels...

6.5CVSS9.6AI score0.00467EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.5 views

WordPress plugin WCMultiShipping 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.7AI score0.00467EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/11/29 12:0 a.m.7 views

WordPress WCMultiShipping Plugin <= 2.3.7 is vulnerable to Broken Access Control

Software WCMultiShipping Type Plugin Vulnerable versions = 2.3.7 Fixed in 2.3.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e3e8c5ad85fa Credits Unknown Required privilege Subscriber...

6.9AI score
Exploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/11/28 12:0 a.m.8 views

WCMultiShipping < 2.3.6 - Missing Authorization to Log Export

Description The WCMultiShipping plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wmsexportlog function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attackers, with subscriber-level access and above,...

6.7AI score0.00467EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/22 12:0 a.m.10 views

WordPress WCMultiShipping Plugin <= 2.3.5 is vulnerable to Broken Access Control

Software WCMultiShipping Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48274 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ae6198f38515 Credits Abdi Pranata Required...

6.8AI score0.00467EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder