CVE-2025-11391

Nicht authentifizierte Blind-SQL-Injection in PPOM für WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res; Ein nicht authentifizierter Angreifer kann dies ausnutzen, indem er eine schädliche Nutzlast erstellt und sie in den Parameter...

WP-CVE-2023-28121

WP-CVE-2023-28121 WooCommerce Payments 5.6.2 - Escalation dei privilegi non autenticata Python 2.7 Offrimi un caffè : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC Come si usa? Installa Python 2.7 Scarica qui python file.py Riferimento :...

CVE-2025-29009

CVE-2025-29009 Il plugin WordPress Medical Prescription Attachment per WooCommerce = 1.2.3 è vulnerabile a un caricamento arbitrario di file ad alta priorità. CVE-2025-29009 Webkul Medical Prescription Attachment — Caricamento di file senza restrizioni → Web Shell ,-. . , ,--. ,-. ,-. ,-. ;--' ,-...

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.8...

WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by V1T in WordPress Plugin AFFI – Affiliate Marketing for WooCommerce versions = 1.0.10...

WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Content Injection vulnerability discovered by cazy in WordPress Plugin Thank You Page Customizer for WooCommerce versions = 1.2.3...

WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

Shop Manager+ Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WooCommerce versions 9.8.0-11.1.2...

WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Bayarcash WooCommerce versions = 4.4.2...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - WooCommerce Product Slider Pro: Impianto di Software Malevolo e RCE Report di Cybersecurity in Stile Consulenziale Report professionale di valutazione della vulnerabilità per il rischio della supply chain del plugin WooCommerce, inclusi impatto aziendale, remediation e strategia ...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Descrizione Il plugin WooCommerce Designer Pro per WordPress, ampiamente utilizzato specialmente in temi come Pricom - Printing Company & Design Services, è vulnerabile al caricamento arbitrario di file a causa della...

CVE-2024-54262

CVE-2024-54262 Exploit CVE-2024-54262: Upload Arbitrario di File in Import Export for WooCommerce Panoramica Questo script sfrutta una vulnerabilità nel plugin WordPress "Import Export for WooCommerce". La vulnerabilità consente a utenti non autorizzati di caricare file arbitrari, portando a una...

Vitepos-CVE-Report

Vitepos-CVE-Bericht Offenlegung für CVE-2025-13156 CVE-2025-13156 - Sicherheitslücke in Vitepos – Point of Sale POS für WooCommerce Dieses Repository legt eine Sicherheitslücke offen, die in Vitepos – Point of Sale POS für WooCommerce =' \ -H 'X-WP-Nonce: ' \ -F 'categoryname=evil' ...

CVE-2026-105878

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Iniezione SQL post-autenticazione Exploit Title: WooCommerce Customers Manager 29.4 - Iniezione SQL post-autenticazione Data: 2024-03-25 Autore Exploit: Ivan Spiridonov - xbz0n Software Link:...

WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Booster for WooCommerce versions = 8.4.0...

CVE-2026-3891-Linux

███████╗██████╗ ██╗███████╗███╗ ██╗██████╗ ███████╗ ██╔════╝██╔══██╗██║██╔════╝████╗ ██║██╔══██╗██╔════╝ █████╗ ██████╔╝██║█████╗ ██╔██╗ ██║██║ ██║███████╗ ██╔══╝ ██╔══██╗██║██╔══╝ ██║╚██╗██║██║ ██║╚════██║ ██║ ██║ ██║██║███████╗██║ ╚████║██████╔╝███████║ ╚═╝ ╚═╝ ╚═╝╚═╝╚══════╝╚═╝ ╚═══╝╚═════╝...

woocommerce_scanner

Questo repository non contiene un README...

CVE-2026-105878 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

CVE-2026-105878

The YITH WooCommerce Product Bundles WordPress plugin (versions

EUVD-2026-94931

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...