EUVD-2026-106288

Vulnerability in the Sourcing product of Oracle E-Business Suite component: Auctions. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Sourcing. Successful attacks of this...

CVE-2026-83370

Vulnerability in the Sourcing product of Oracle E-Business Suite component: Auctions. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Sourcing. Successful attacks of this...

CVE-2026-83370

A vulnerability exists in the Sourcing product of Oracle E-Business Suite (component: Auctions ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the Sourcing product, potentially leading to a f...

Oracle E-Business Suite: CVE-2026-83370: Critical Patch Update

Vulnerability in the Sourcing product of Oracle E-Business Suite component: Auctions. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Sourcing. Successful attacks of this...

CVE-2026-42635

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

EUVD-2026-93057

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635

The WooCommerce Simple Auctions WordPress plugin (versions

CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

PT-2026-106479

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin WooCommerce Simple Auctions versions = 3.0.10...

CVE-2026-54735

Prebid Server (open-source in real-time advertising auctions) contains a vulnerability (CVE-2026-54735) in versions prior to 4.4.0 where certain bidder adapters interpolate user-supplied parameters into outbound request URLs without proper host/subdomain validation, enabling crafted bid requests ...

WordPress Ultimate WooCommerce Auction Pro plugin <= 2.4.5 - Reflected XSS via uwa_manage_auctions vulnerability

Reflected XSS via uwamanageauctions vulnerability discovered by Kacper Rybczyński in WordPress Plugin Ultimate Auction Pro versions = 2.4.5...

CVE-2026-4259 Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctions

The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2026-4259

The ultimate-woocommerce-auction-pro WordPress plugin (versions

EUVD-2022-55989

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET reques...

EUVD-2022-55984

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via...

CVE-2022-50964

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via...

CVE-2022-50968

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET reques...