Lucene search
+L

19350 matches found

CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin Live Shopping & Shoppable Videos For WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00117EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.12 views

WordPress Taxi Booking Manager for Woocommerce | E-cab plugin <= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover vulnerability

Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Taxi Booking Manager for WooCommerce versions = 1.3.0...

9.8CVSS5.5AI score0.00469EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.15 views

WordPress B1.lt for WooCommerce plugin <= 2.2.56 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin B1.lt for WooCommerce versions = 2.2.56...

6.5CVSS5.9AI score0.00287EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.13 views

WordPress plugin Serial Codes Generator and Validator with WooCommerce Support 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.5AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.11 views

WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Wishlist Deletion vulnerability discovered by Legion Hunter in WordPress Plugin Premmerce Wishlist for WooCommerce versions = 1.1.10...

5.3CVSS5.9AI score0.00335EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.11 views

WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update vulnerability

Missing Authorization To Authenticated Subscriber+ Brand Permalink Settings Update vulnerability discovered by WordFence in WordPress Plugin Premmerce Brands for WooCommerce versions = 1.2.13...

4.3CVSS5.9AI score0.00279EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin Order Cancellation & Returns for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.10 views

PT-2025-54360

Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

4.3CVSS6.8AI score0.00117EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.9 views

WordPress PDF Catalog for WooCommerce plugin <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by kr0d in WordPress Plugin PDF Catalog for WooCommerce versions = 1.1.18...

5.4CVSS5.3AI score0.00168EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.13 views

WordPress Checkout Mestres do WP for WooCommerce plugin 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update vulnerability

WordPress Checkout Mestres do WP for WooCommerce plugin 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update vulnerability discovered by kr0d in WordPress Plugin Checkout Mestres WP versions 8.6.5-8.7.5...

9.8CVSS5.5AI score0.00708EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.10 views

WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin SKU Generator for WooCommerce versions = 1.6.2...

6.1CVSS5.4AI score0.00335EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.18 views

PT-2025-54307

Name of the Vulnerable Software and Affected Versions Genetech Products Web and WooCommerce Addons for WPBakery Builder versions through 1.5 Description The software contains a flaw related to improper input handling during web page creation, leading to a DOM-Based Cross-site Scripting issue. Thi...

6.5CVSS6.3AI score0.00196EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin Maximum Products per User for WooCommerce 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

6.5CVSS5.7AI score0.00155EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.15 views

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Refund Request Cancellation vulnerability discovered by Powpy in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.5.5...

4.3CVSS5.9AI score0.00188EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.23 views

PT-2025-54373

Missing Authorization vulnerability in Mykola Lukin Orders Chat for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orders Chat for WooCommerce: from n/a through 1.2.0...

4.3CVSS6.9AI score0.00229EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.11 views

WordPress plugin WooCommerce Parcelas 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

5.9CVSS6AI score0.0021EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.12 views

WordPress plugin WordPress & WooCommerce Scraper Plugin, Import Data from Any Site 代码问题漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

5.4CVSS6.8AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.16 views

PT-2025-54316

Name of the Vulnerable Software and Affected Versions WPFactory Maximum Products per User for WooCommerce versions through 4.4.2 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Cross-site Scripting XSS issue. This...

6.5CVSS5.7AI score0.00155EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.13 views

WordPress plugin Orders Chat for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin Live Shopping & Shoppable Videos For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00249EPSS
SaveExploits0References1
Rows per page
Query Builder