Lucene search
+L

26 matches found

Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•26 views

YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting

The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'queryString' parameter in the REST API endpoint /ywcas/v1/register in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. id: CVE-2024-4455 info...

7.2CVSS5.8AI score0.0101EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 9:24 a.m.•19 views

CVE-2023-40602

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

6.1CVSS7.1AI score0.00469EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-35145

Malicious code in bioql PyPI...

4.3CVSS9.2AI score0.00413EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-56378

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-45160

Malicious code in bioql PyPI...

6.1CVSS7.1AI score0.00469EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:05 a.m.•13 views

CVE-2023-30783

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0...

4.3CVSS8.6AI score0.00413EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:17 a.m.•18 views

CVE-2023-51678

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

6.5CVSS7.1AI score0.00229EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/09 1:15 p.m.•11 views

CVE-2023-30783

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search smart-woocommerce-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through = 2.5.0...

4.3CVSS5.8AI score0.00413EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/09 1:15 p.m.•24 views

CVE-2023-30783

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0...

4.3CVSS0.00413EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:31 a.m.•7 views

CVE-2023-30783 WordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access Control

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search smart-woocommerce-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through = 2.5.0...

4.3CVSS8.3AI score0.00413EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:31 a.m.•48 views

CVE-2023-30783

CVE-2023-30783 affects the Smart WooCommerce Search plugin for WordPress (

4.3CVSS8.6AI score0.00413EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•3 views

CVE-2023-30783: Missing Authorization

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0...

4.3CVSS5.9AI score0.00413EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•22 views

WordPress plugin Smart WooCommerce Search 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

4.3CVSS8.6AI score0.00413EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/24 11:15 a.m.•19 views

CVE-2024-4455

The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’ parameter in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6AI score0.0101EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/05 10:15 a.m.•14 views

CVE-2023-51678

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

6.5CVSS7.3AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/05 10:00 a.m.•41 views

CVE-2023-51678 WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

4.3CVSS6.7AI score0.00229EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/05 12:00 a.m.•4 views

CVE-2023-51678: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

6.5CVSS6.7AI score0.00229EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/19 8:15 p.m.•12 views

CVE-2023-40602

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

6.1CVSS7.3AI score0.00469EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/19 7:54 p.m.•65 views

CVE-2023-40602

CVE-2023-40602 affects Doofinder WP & WooCommerce Search plugin (versions

6.1CVSS7.1AI score0.00469EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•4 views

CVE-2023-40602: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49...

6.1CVSS7.1AI score0.00469EPSS
SaveExploits0References2
Rows per page
Query Builder