Lucene search
K

27 matches found

NVD
NVD
added 2026/06/11 12:16 p.m.13 views

CVE-2022-45813

Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced AJAX Product Filters: from n/a through 1.6.3.3...

5.4CVSS0.00227EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/11 10:41 a.m.8 views

EUVD-2022-56005

Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced AJAX Product Filters: from n/a through 1.6.3.3...

5.4CVSS5.4AI score0.00227EPSS
Exploits0References1
CVE
CVE
added 2026/06/11 10:41 a.m.33 views

CVE-2022-45813

CVE-2022-45813 affects multiple WordPress/WooCommerce plugins via Broken Access Control and authorization bypass concerns. The BeRocket Advanced AJAX Product Filters entry cites a vulnerability in the plug‑in’s access control; Patchstack confirms the issue across several plugins (e.g., Product Ta...

5.4CVSS5.4AI score0.00227EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.4 views

CVE-2025-68519

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...

8.5CVSS7.6AI score0.00219EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.4 views

EUVD-2025-205200

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...

9.8CVSS7.1AI score0.00219EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.6 views

CVE-2025-68519

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...

8.5CVSS0.00219EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.6 views

PT-2025-53087

Name of the Vulnerable Software and Affected Versions Brands for WooCommerce versions through 3.8.6.3 Description A flaw exists in BeRocket Brands for WooCommerce that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could...

9.8CVSS7.5AI score0.00219EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-48508

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.00476EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-27754

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.00361EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-9789

Malicious code in bioql PyPI...

4.3CVSS6.1AI score0.00148EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:37 a.m.5 views

CVE-2023-44149

Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through = 3.8.2.2...

5.3CVSS5.7AI score0.00476EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:42 a.m.9 views

CVE-2023-23667

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

6.5CVSS4.9AI score0.00361EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/06 5:16 p.m.11 views

CVE-2025-32263

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS7.2AI score0.00148EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 4:15 p.m.4 views

CVE-2025-32263

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS0.00148EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 3:59 p.m.3 views

CVE-2025-32263 WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS7.2AI score0.00148EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.13 views

CVE-2025-32263 WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS0.00148EPSS
Exploits0References1
CVE
CVE
added 2025/04/04 3:59 p.m.38 views

CVE-2025-32263

Technical details (affected versions beyond 3.6.2, root cause, exploit info, remediation) are not provided in the supplied documents; monitoring is advised.

4.3CVSS7.2AI score0.00148EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/04 12:0 a.m.3 views

PT-2025-15017 · Berocket · Berocket Sequential Order Numbers For Woocommerce

Name of the Vulnerable Software and Affected Versions: BeRocket Sequential Order Numbers for WooCommerce versions 3.6.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be...

4.3CVSS5.4AI score0.00148EPSS
Exploits0References5
NVD
NVD
added 2024/12/13 3:15 p.m.5 views

CVE-2023-44149

Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through = 3.8.2.2...

5.3CVSS0.00476EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.3 views

PT-2024-13177 · Berocket · Berocket Brands For Woocommerce

Name of the Vulnerable Software and Affected Versions: BeRocket Brands for WooCommerce versions 3.8.2.2 and earlier Description: The issue affects the BeRocket Brands for WooCommerce plugin, allowing exploitation of incorrectly configured access control security levels due to a missing...

5.3CVSS7.1AI score0.00476EPSS
Exploits0References5
Rows per page
Query Builder