CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

19373 matches found

NVD•added 2026/03/19 9:16 a.m.•26 views

CVE-2026-25443

Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fraud Prevention For Woocommerce: from n/a through = 2.3.3...

7.5CVSS0.00241EPSS

SaveExploits0References1

CVE•added 2026/03/19 8:36 a.m.•33 views

CVE-2026-25443

The CVE-2026-25443 entry concerns the WordPress plugin Dotstore Fraud Prevention For Woocommerce, affecting the Fraud Prevention For Woocommerce component (vendor/app not separately named in provided docs). The vulnerability is described as Missing Authorization with an impact described as Arbitr...

7.5CVSS5.9AI score0.00241EPSS

SaveExploits0References1

Vulnrichment•added 2026/03/19 8:36 a.m.•5 views

CVE-2026-25443 WordPress Fraud Prevention For Woocommerce plugin <= 2.3.3 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fraud Prevention For Woocommerce: from n/a through 2.3.3...

7.5CVSS5.8AI score0.00241EPSS

SaveExploits0References1

Cvelist•added 2026/03/19 8:36 a.m.•37 views

CVE-2026-25443 WordPress Fraud Prevention For Woocommerce plugin <= 2.3.3 - Arbitrary Content Deletion vulnerability

7.5CVSS0.00241EPSS

SaveExploits0References1

ATTACKERKB•added 2026/03/19 8:36 a.m.•6 views

CVE-2026-25443

7.5CVSS5.8AI score0.00241EPSS

SaveExploits0References2

EUVD•added 2026/03/19 6:30 a.m.•14 views

EUVD-2026-13045

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9.8CVSS5.8AI score0.01737EPSS

SaveExploits1References2

EUVD•added 2026/03/19 6:30 a.m.•13 views

EUVD-2026-13059

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9CVSS5.8AI score0.01734EPSS

SaveExploits2References2

NVD•added 2026/03/19 6:16 a.m.•14 views

CVE-2026-27540

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9CVSS0.01734EPSS

SaveExploits2References1

NVD•added 2026/03/19 6:16 a.m.•13 views

CVE-2026-27542

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9.8CVSS0.01737EPSS

SaveExploits1References1

ATTACKERKB•added 2026/03/19 5:24 a.m.•5 views

CVE-2026-27540

9CVSS5.8AI score0.01734EPSS

SaveExploits2References2

Vulnrichment•added 2026/03/19 5:24 a.m.•5 views

CVE-2026-27540 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

9CVSS5.8AI score0.01734EPSS

SaveExploits2References1

Cvelist•added 2026/03/19 5:24 a.m.•36 views

CVE-2026-27540 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

9CVSS0.01734EPSS

SaveExploits2References1

CVE•added 2026/03/19 5:24 a.m.•77 views

CVE-2026-27540

CVE-2026-27540 is an unauthenticated arbitrary file upload vulnerability in the WordPress WooCommerce Wholesale Lead Capture plugin (

9CVSS5.7AI score0.01734EPSS

SaveIn wildExploits2References1

Cvelist•added 2026/03/19 5:22 a.m.•38 views

CVE-2026-27542 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

9.8CVSS0.01737EPSS

SaveExploits1References1

CVE•added 2026/03/19 5:22 a.m.•37 views

CVE-2026-27542

CVE-2026-27542 and CVE-2026-27540 affect the WordPress WooCommerce Wholesale Lead Capture plugin up to version 2.0.3.1. CVE-2026-27542 is an unauthenticated privilege-escalation in wwlc_create_user that can inject arbitrary WordPress capabilities (including administrator) during registration, ena...

9.8CVSS5.7AI score0.01737EPSS

SaveIn wildExploits1References1

ATTACKERKB•added 2026/03/19 5:22 a.m.•5 views

CVE-2026-27542

9.8CVSS5.8AI score0.01737EPSS

SaveExploits1References2

Vulnrichment•added 2026/03/19 5:22 a.m.•6 views

CVE-2026-27542 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

9.8CVSS5.8AI score0.01737EPSS

SaveExploits1References1

CNNVD•added 2026/03/19 12:00 a.m.•18 views

WordPress plugin Fraud Prevention For Woocommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.5CVSS5.8AI score0.00241EPSS

SaveExploits0References1

CNNVD•added 2026/03/19 12:00 a.m.•16 views

WordPress plugin Woocommerce Wholesale Lead Capture 代码问题漏洞

9CVSS5.9AI score0.01734EPSS

SaveExploits2References1

Positive Technologies•added 2026/03/19 12:00 a.m.•17 views

PT-2026-26275

Name of the Vulnerable Software and Affected Versions Dotstore Fraud Prevention For Woocommerce versions through 2.3.3 Description An authorization issue exists in Dotstore Fraud Prevention For Woocommerce due to incorrectly configured access control security levels. This allows for exploitation ...

7.5CVSS5.9AI score0.00241EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by