Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/03 4:37 p.m.•13 views

CVE-2025-8570

CVE-2025-8570 BeyondCart Connector = 2.1.0 - Configuración faltante del secreto JWT para escalada de privilegios no autenticada 🚨 BeyondCart Connector = 2.1.0 - Escalada de privilegios JWT CVE-2025-8570 🛡️ Resumen de la vulnerabilidad El plugin BeyondCart Connector para WordPress, en las versiones...

9.8CVSS6AI score0.00639EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-27645

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00639EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2025/09/11 12:36 p.m.•268 views

Exploit for CVE-2025-8570

CVE-2025-8570 BeyondCart Connector = 2.1.0 - Missing Confi...

9.8CVSS7.5AI score0.00639EPSS
SaveExploits1
NVD
NVD
•added 2025/09/11 8:15 a.m.•23 views

CVE-2025-8570

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS0.00639EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/09/11 7:24 a.m.•58 views

CVE-2025-8570 BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 2.1.0. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS6AI score0.00639EPSS
SaveExploits1References2
CVE
CVE
•added 2025/09/11 7:24 a.m.•53 views

CVE-2025-8570

The BeyondCart Connector plugin for WordPress (versions 1.4.2 through 2.1.0) is affected by Privilege Escalation due to improper JWT secret management and authorization in the determine_current_user filter. This allows unauthenticated attackers to craft valid JWTs and impersonate any user (includ...

9.8CVSS5.8AI score0.00639EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/09/11 7:24 a.m.•43 views

CVE-2025-8570 BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS0.00639EPSS
SaveExploits1References3
Patchstack
Patchstack
•added 2025/09/11 1:59 a.m.•28 views

WordPress BeyondCart Connector plugin <= 3.0.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin BeyondCart Connector versions = 3.0.1...

9.8CVSS6.7AI score0.00639EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/09/11 12:00 a.m.•18 views

WordPress plugin BeyondCart Connector 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A trust management issue...

9.8CVSS6.7AI score0.00639EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/09/11 12:00 a.m.•32 views

PT-2025-37134

Name of the Vulnerable Software and Affected Versions: BeyondCart Connector plugin for WordPress versions 1.4.2 through 2.1.0 Description: The BeyondCart Connector plugin for WordPress is susceptible to privilege escalation due to improper JWT JSON Web Token secret management and authorization...

9.8CVSS6.6AI score0.00639EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/11 12:00 a.m.•7 views

CVE-2025-8570: Use of Hard-coded Credentials

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS5.8AI score0.00639EPSS
SaveExploits1References2
Rows per page
Query Builder