Lucene search
K

21 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/15 4:58 p.m.3 views

CVE-2026-23496

Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing "Favourite Output Channel Configurations." Testing revealed that an...

5.4CVSS5.5AI score0.00001EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-19968

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00179EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-30737

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00053EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.2 views

CVE-2025-57917

Missing Authorization vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through = 2.4...

4.3CVSS5.9AI score0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/06 11:21 a.m.3 views

CVE-2025-24780

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a...

8.5CVSS5.9AI score0.00179EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/04 11:18 a.m.2 views

CVE-2025-24780 WordPress Printcart Web to Print Product Designer for WooCommerce <= 2.4.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce allows SQL Injection. This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through 2.4.0...

8.5CVSS7AI score0.00179EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/04 11:18 a.m.10 views

CVE-2025-24780 WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a...

8.5CVSS0.00179EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.2 views

PT-2025-27900 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions prior to 2.4.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

8.5CVSS7.5AI score0.00179EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.1 views

WordPress plugin Printcart Web to Print Product Designer for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Printcart...

8.5CVSS7.7AI score0.00179EPSS
Exploits0References2
NVD
NVD
added 2025/05/23 1:15 p.m.5 views

CVE-2025-47640

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a...

9.3CVSS0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/23 12:43 p.m.13 views

CVE-2025-47640 WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a...

9.3CVSS0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/23 12:43 p.m.5 views

CVE-2025-47640 WordPress Printcart Web to Print Product Designer for WooCommerce <= 2.3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce allows SQL Injection. This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through 2.3.8...

9.3CVSS9.6AI score0.00232EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/23 12:0 a.m.2 views

PT-2025-22767 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions 2.3.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for...

9.3CVSS9.6AI score0.00232EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/05/23 12:0 a.m.1 views

PT-2025-22768 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions 2.3.8 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can lead to...

10CVSS9.5AI score0.00414EPSS
Exploits0References4
CNVD
CNVD
added 2022/04/27 12:0 a.m.19 views

WordPress plugin Web To Print Shop : uDraw arbitrary file reading vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Web To Print Shop: An arbitrary file reading vulnerability exists in versions of uDraw prior...

7.5CVSS2.5AI score0.68162EPSS
Exploits2References1
NVD
NVD
added 2022/04/25 4:16 p.m.14 views

CVE-2022-0656

The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the...

7.5CVSS0.68162EPSS
Exploits2References1
Prion
Prion
added 2022/04/25 4:16 p.m.11 views

Code injection

The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the...

5CVSS7.4AI score0.68162EPSS
Exploits2References1
CVE
CVE
added 2022/04/25 3:51 p.m.76 views

CVE-2022-0656

The CVE-2022-0656 issue affects the WordPress plugin Web To Print Shop: uDraw , where versions prior to 3.3.3 do not validate the URL parameter in the AJAX action udraw_convert_url_to_base64 before using it in file_get_contents, enabling unauthenticated arbitrary file reads (e.g., /etc/passwd, wp...

7.5CVSS7.4AI score0.68162EPSS
In wildExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/04/25 3:51 p.m.19 views

CVE-2022-0656 uDraw < 3.3.3 - Unauthenticated Arbitrary File Access

The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the...

7.6AI score0.68162EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/04/25 12:0 a.m.3 views

WordPress plugin Web To Print Shop : uDraw 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Web To Print Shop: An arbitrary file reading vulnerability exists in versions of uDraw prior...

7.5CVSS5.9AI score0.68162EPSS
Exploits2References3
Rows per page
Query Builder