Lucene search
+L

19381 matches found

CNNVD
CNNVD
added 2025/11/06 12:00 a.m.17 views

WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

9.1CVSS7.2AI score0.00443EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.12 views

PT-2025-45288

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WPClever WPC Product Options for WooCommerce wpc-product-options allows PHP Local File Inclusion.This issue affects WPC Product Options for WooCommerce: from n/a through = 1.8.6...

7.5CVSS7.1AI score0.00458EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.10 views

WordPress plugin Premmerce Wishlist for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.8 views

WordPress plugin Bux Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.6AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.7 views

WordPress plugin Premmerce Product Search for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.7AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.15 views

WordPress plugin Booster for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

7.1CVSS6AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.9 views

PT-2025-45264

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce Wishlist for WooCommerce: from n/a throug...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45276

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.8 views

WordPress plugin WooCommerce Store Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

7.5CVSS6.6AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.9 views

WordPress plugin Custom User Registration Fields for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

10CVSS6.8AI score0.00425EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45267

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows PHP Local File Inclusion.This issue affects Premmerce Product Search for WooCommerce: from n/a through ...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.36 views

PT-2025-45284

Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a through = 1.2.46...

7AI score0.00408EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/05 10:15 a.m.27 views

CVE-2025-12468

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-coupons/' REST API endpoint. This is due to the endpoint being marked as a...

5.3CVSS5.8AI score0.00346EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/05 9:27 a.m.44 views

CVE-2025-12468

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin (up to version 3.6.4.1) is exposed to unauthenticated sensitive information exposure via the /wc-coupons/ REST API endpoint. The endpoint is registered as a public API (public_api = true) and uses pe...

5.3CVSS5.6AI score0.00346EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/05 9:27 a.m.5 views

CVE-2025-12468 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-coupons/' REST API endpoint. This is due to the endpoint being marked as a...

5.3CVSS5.6AI score0.00346EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/05 9:27 a.m.19 views

CVE-2025-12468 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-coupons/' REST API endpoint. This is due to the endpoint being marked as a...

5.3CVSS0.00346EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/11/05 5:08 a.m.11 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00279EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/05 12:00 a.m.20 views

PT-2025-45100

Name of the Vulnerable Software and Affected Versions FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce versions up to and including 3.6.4.1 Description The software contains a flaw that allows unauthenticated attackers to extract sensitive data, including...

5.3CVSS6.4AI score0.00346EPSS
SaveExploits0References7
CNVD
CNVD
added 2025/11/05 12:00 a.m.12 views

WordPress Plugin WooCommerce Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin WooCommerce, which stems...

5.3CVSS5.7AI score0.0031EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/11/04 12:04 p.m.361 views

Exploit for CVE-2025-29009

CVE-2025-29009-POC Medical Prescr...

10CVSS7.1AI score0.00544EPSS
SaveExploits4
Rows per page
Query Builder