Lucene search
+L

19496 matches found

RedhatCVE
RedhatCVE
added 2025/12/24 12:32 p.m.8 views

CVE-2023-52210

Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.0...

5.3CVSS6.9AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 12:31 p.m.57 views

CVE-2025-68528 WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce amount-left-free-shipping-woocommerce allows Stored XSS.This issue affects Free Shipping Bar: Amount Left for Free Shippin...

6.5CVSS0.0016EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 12:31 p.m.41 views

CVE-2025-68528

CVE-2025-68528 is a Stored XSS vulnerability in the Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin. The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected plugin versions are from n/a through 2.4.9...

6.5CVSS5.6AI score0.0016EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 12:31 p.m.6 views

CVE-2025-68528 WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce amount-left-free-shipping-woocommerce allows Stored XSS.This issue affects Free Shipping Bar: Amount Left for Free Shippin...

6.5CVSS5.6AI score0.0016EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 12:31 p.m.42 views

CVE-2025-68519 WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...

8.5CVSS0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 12:31 p.m.35 views

CVE-2025-68519

BeRocket/Bear Brands for WooCommerce plugin (WordPress Brands for WooCommerce) contains a SQL Injection vulnerability due to improper neutralization of special elements in SQL statements. Affected versions are Brands for WooCommerce up to 3.8.6.3. The issue enables Blind SQL Injection. Remediatio...

8.5CVSS7.2AI score0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 12:31 p.m.4 views

CVE-2025-68519 WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...

8.5CVSS7.2AI score0.00249EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/24 7:03 a.m.14 views

WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by WordFence in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 5.8.0...

9.8CVSS7.2AI score0.03766EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/12/24 5:16 a.m.14 views

CVE-2025-13773

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS0.03766EPSS
SaveExploits0References7
CVE
CVE
added 2025/12/24 4:32 a.m.35 views

CVE-2025-13773

The WordPress plugin Print Invoice & Delivery Notes for WooCommerce (

9.8CVSS6.5AI score0.03766EPSS
SaveIn wildExploits0References7
Vulnrichment
Vulnrichment
added 2025/12/24 4:32 a.m.7 views

CVE-2025-13773 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS6.5AI score0.03766EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/12/24 4:32 a.m.36 views

CVE-2025-13773 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS0.03766EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.11 views

PT-2025-52868

Name of the Vulnerable Software and Affected Versions Print Invoice & Delivery Notes for WooCommerce versions up to and including 5.8.0 Description The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is susceptible to Remote Code Execution due to a missing capability check...

9.8CVSS7AI score0.03766EPSS
SaveExploits0References18
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Brands for WooCommerce 安全漏洞

WordPress Brands for WooCommerce Plugin is a category of plugins for WordPress websites that specialize in helping WooCommerce online stores manage product brands. WordPress Brands for WooCommerce Plugin suffers from a SQL injection vulnerability that stems from the application's lack of validati...

8.5CVSS7.7AI score0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.14 views

WordPress plugin Free Shipping Bar: Amount Left for Free Shipping for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers...

6.5CVSS5.7AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.9 views

PT-2025-53250

Name of the Vulnerable Software and Affected Versions WP Swings Membership For WooCommerce versions through 3.0.3 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows bypassing authorization through a user-controlled key. The issue...

8.1CVSS6.7AI score0.00384EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.16 views

PT-2025-53087

Name of the Vulnerable Software and Affected Versions Brands for WooCommerce versions through 3.8.6.3 Description A flaw exists in BeRocket Brands for WooCommerce that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could...

9.8CVSS7.5AI score0.00249EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2025/12/24 12:00 a.m.10 views

VulnCheck KEV: CVE-2025-13773

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS6.1AI score0.03766EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.14 views

PT-2025-53093

Name of the Vulnerable Software and Affected Versions WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce versions through 2.4.9 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, potentially leading to...

5.4CVSS5.6AI score0.0016EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Membership For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An authorization bypass vulnerability exists in the WordPress Membership For WooCommerce plugin that originates from an authorization bypass via a user-controlled key, which can...

7.5CVSS6.5AI score0.00384EPSS
SaveExploits0References1
Rows per page
Query Builder