CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

34 matches found

Positive Technologies•added 2026/10/19 12:00 a.m.•4 views

PT-2026-117229

The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons...

6AI score0.00146EPSS

SaveExploits0References2

attackerkb•added 2026/05/25 10:18 p.m.•16 views

CVE-2026-45438

Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Coupons for WooCommerce: from n/a before 2.3.0...

7.5CVSS5.8AI score0.00377EPSS

SaveExploits0References2

RedhatCVE•added 2026/04/10 7:23 p.m.•20 views

CVE-2026-39508

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows DOM-Based XSS.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through =...

6.5CVSS5.8AI score0.00224EPSS

SaveExploits0References1

EUVD•added 2026/04/08 9:31 a.m.•23 views

EUVD-2026-20175

5.9AI score0.00224EPSS

SaveExploits0References2

NVD•added 2026/04/08 9:16 a.m.•19 views

CVE-2026-39508

6.5CVSS0.00224EPSS

SaveExploits0References1

Cvelist•added 2026/04/08 8:30 a.m.•38 views

CVE-2026-39508 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability

6.5CVSS0.00224EPSS

SaveExploits0References1

attackerkb•added 2026/04/08 8:30 a.m.•14 views

CVE-2026-39508

5.8AI score0.00224EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/04/08 12:00 a.m.•7 views

CVE-2026-39508: Improper Neutralization of Input During Web Page Generation

6.5CVSS5.8AI score0.00224EPSS

SaveExploits0References2

CNNVD•added 2026/04/08 12:00 a.m.•22 views

WordPress plugin Advanced Coupons for WooCommerce Coupons – Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.5CVSS5.6AI score0.00224EPSS

SaveExploits0References1

Patchstack•added 2026/03/28 5:15 p.m.•24 views

WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by timomangcut in WordPress Plugin Advanced Coupons for WooCommerce Coupons versions = 4.7.1.1...

6.5CVSS5.9AI score0.00224EPSS

SaveExploits0Affected Software1

RedhatCVE•added 2026/03/26 3:16 p.m.•20 views

CVE-2026-31919

Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through = 4.7.1...

4.3CVSS5.8AI score0.00281EPSS

SaveExploits0References1

EUVD•added 2026/03/17 6:31 a.m.•21 views

EUVD-2026-12537

The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 via the getmainqueryargs function due to insufficient restrictions on which posts can be included. This makes it possib...

5.3CVSS5.8AI score0.00208EPSS

SaveExploits0References3

Vulnrichment•added 2026/03/17 3:36 a.m.•11 views

CVE-2026-2373 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure

5.3CVSS5.7AI score0.00208EPSS

SaveExploits0References2

EUVD•added 2026/03/13 9:31 p.m.•23 views

EUVD-2026-11796

4.3CVSS5.8AI score0.00281EPSS

SaveExploits0References2

Cvelist•added 2026/03/13 11:41 a.m.•44 views

CVE-2026-31919 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability

4.3CVSS0.00281EPSS

SaveExploits0References1

Vulnrichment•added 2026/03/13 11:41 a.m.•11 views

CVE-2026-31919 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability

4.3CVSS6AI score0.00281EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•7 views

CVE-2026-31919: Missing Authorization

4.3CVSS5.9AI score0.00281EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:46 a.m.•15 views

CVE-2025-14070

The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sendtestemail' AJAX action in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

7.5CVSS6AI score0.00423EPSS

SaveExploits0References1

Vulnrichment•added 2026/01/07 9:21 a.m.•10 views

CVE-2025-14070 Reviewify <= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon Creation

7.5CVSS5.9AI score0.00423EPSS

SaveExploits0References5

CVE•added 2026/01/07 9:21 a.m.•34 views

CVE-2025-14070

CVE-2025-14070 – Reviewify (Review Discounts & Photo/Video Reviews for WooCommerce) : The WordPress Reviewify plugin versions up to 1.0.6 are vulnerable due to a missing capability check on the send_test_email AJAX action. This allows authenticated attackers with Contributor-level access or highe...

7.5CVSS5.9AI score0.00423EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by