22 matches found
WordPress Checkout Field Manager (Checkout Manager) for WooCommerce plugin 7.4.9-7.9.6 - Subscriber+ Arbitrary Attachment Deletion vulnerability
Subscriber+ Arbitrary Attachment Deletion vulnerability discovered by PO-WEI TING Dinlon5566, Open Information Security Inc. in WordPress Plugin WooCommerce Checkout Manager versions 7.4.9-7.9.6...
CVE-2026-66475
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...
CVE-2026-66475 WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...
CVE-2026-66475
CVE-2026-66475 affects the WordPress plugin “Checkout Field Editor for WooCommerce – Checkout Manager” up to version ≤ 3.0.5. The connected documents describe a Cross Site Scripting (XSS) vulnerability impacting shop manager workflows, but do not provide technical details about the root cause, af...
CVE-2026-66475
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce - Checkout Manager = 3.0.5 versions...
CVE-2026-66475: Improper Neutralization of Input During Web Page Generation
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce – Checkout Manager = 3.0.5 versions...
WordPress Checkout Field Manager (Checkout Manager) for WooCommerce plugin <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability
Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability discovered by NosleeP++ in WordPress Plugin WooCommerce Checkout Manager versions = 7.8.5...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
EUVD-2019-3474
Malware in sbrugna...
EUVD-2023-51779
Malicious code in bioql PyPI...
CVE-2023-47681 WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0...
CVE-2023-47681: Missing Authorization
Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0...
WordPress plugin WooCommerce Checkout Manager security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-13469
Name of the Vulnerable Software and Affected Versions WooCommerce Checkout Manager versions prior to 7.3.0 Description The issue is related to a Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager. Recommendations For versions prior to 7.3.0, update to version 7.3.0 or...
WordPress WooCommerce Checkout Manager Plugin <= 7.3.0 is vulnerable to Broken Access Control
Software WooCommerce Checkout Manager Type Plugin Vulnerable versions = 7.3.0 Fixed in 7.3.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47681 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID b9559fa71258 Credits Rafie Muhammad...
Design/Logic Flaw
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
CVE-2019-11807
CVE-2019-11807 affects the WordPress plugin “WooCommerce Checkout Manager” (before version 4.3). The vulnerability allows unauthenticated users to delete media via an AJAX endpoint: wp-admin/admin-ajax.php?action=update_attachment_wccm with the wccm_default_keys_load parameter, caused by an insec...
CVE-2019-11807: Unrestricted Upload of File with Dangerous Type
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...