Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 2:12 a.m.5 views

CVE-2024-2395

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

7.3CVSS6.5AI score0.00059EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:7 p.m.8 views

CVE-2024-0683

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and...

7.5CVSS6.6AI score0.26389EPSS
Exploits0References1
OSV
OSV
added 2024/03/13 4:15 p.m.1 views

CVE-2024-0683

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and...

7.5CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2024/03/13 4:15 p.m.21 views

Design/Logic Flaw

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and...

7.5CVSS6.9AI score0.26389EPSS
Exploits0References2
CVE
CVE
added 2024/03/13 3:27 p.m.35 views

CVE-2024-0683

CVE-2024-0683 concerns Bulgarisation for WooCommerce, a WordPress plugin, with unauthorized access due to missing capability checks across several functions in all versions up to 3.0.14. The Red Hat advisory and Wordfence vulnerability entry confirm that both unauthenticated users and authenticat...

7.5CVSS7.5AI score0.26389EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/03/13 3:27 p.m.45 views

CVE-2024-0683 Bulgarisation for WooCommerce <= 3.0.14 - Missing Authorization

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and...

7.3CVSS7.1AI score0.26389EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.0 views

WordPress Plugin Bulgarisation for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS6.7AI score0.26389EPSS
Exploits0References3
OSV
OSV
added 2024/03/12 10:15 p.m.0 views

CVE-2024-2395

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

4.3CVSS5.7AI score
Exploits0References2
CVE
CVE
added 2024/03/12 9:34 p.m.60 views

CVE-2024-2395

CVE-2024-2395 : Bulgarisation for WooCommerce (WordPress) is affected by a CSRF vulnerability due to missing/incorrect nonce validation in multiple functions, enabling unauthenticated attackers to forge requests to generate/delete labels if a site admin is induced to click a link. This vulnerabil...

7.3CVSS8.9AI score0.00059EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/12 9:34 p.m.9 views

CVE-2024-2395 Bulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgery

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

7.3CVSS7.1AI score0.00059EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/12 9:34 p.m.13 views

CVE-2024-2395 Bulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgery

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

7.3CVSS7AI score0.00059EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/12 12:0 a.m.0 views

WordPress Plugin Bulgarisation for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.3CVSS6.6AI score0.00059EPSS
Exploits0References4
WPVulnDB
WPVulnDB
added 2024/03/12 12:0 a.m.17 views

Bulgarisation for WooCommerce < 3.0.15 - Missing Authorization

Description The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level...

7.5CVSS6.6AI score0.26389EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.2 views

PT-2024-20196 · WordPress · Bulgarisation For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bulgarisation for WooCommerce plugin for WordPress versions up to, and including, 3.0.14 Description: The issue is due to missing or incorrect nonce validation on several functions, making it possible for unauthenticated attackers to generate...

7.3CVSS9.3AI score0.00059EPSS
Exploits0References6
Rows per page
Query Builder