CVE-2026-39765

Shop Manager Privilege Escalation in Challan = 3.7.88 versions...

CVE-2026-39765 WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability

Shop Manager Privilege Escalation in Challan = 3.7.88 versions...

CVE-2026-39765 WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability

Shop Manager Privilege Escalation in Challan = 3.7.88 versions...

CVE-2026-39765

The Challan WordPress plugin (versions

CVE-2026-39765: Incorrect Privilege Assignment

Shop Manager Privilege Escalation in Challan = 3.7.88 versions...

PT-2026-106437

Name of the Vulnerable Software and Affected Versions Challan versions prior to 3.7.89 Description A privilege escalation issue exists that allows a user with Shop Manager permissions to elevate their privileges within the system. Recommendations Update to a version newer than 3.7.88...

WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Challan versions = 3.7.88...

EUVD-2025-13854

Malicious code in bioql PyPI...

CVE-2025-47462

Cross-Site Request Forgery CSRF vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through = 3.7.58...

CVE-2025-47462

Cross-Site Request Forgery CSRF vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through = 3.7.58...

CVE-2025-47462 WordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through = 3.7.58...

CVE-2025-47462 WordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through = 3.7.58...

CVE-2025-47462

CVE-2025-47462 is a CSRF-to-Privilege Escalation vulnerability in the WordPress plugin “Challan – PDF Invoice & Packing Slip for WooCommerce” (Challan) up to version 3.7.58. The vulnerability allows an attacker to perform privileged actions via forged requests (CSRF) to update arbitrary options, ...

WordPress plugin Challan has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-20094 · Unknown · Ohidul Islam Challan

Name of the Vulnerable Software and Affected Versions: Ohidul Islam Challan versions 3.7.58 and earlier Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. Recommendations: For Ohidul Islam Challan versions 3.7.58 and earlier, as a temporary workaround, consider...

CVE-2025-47462: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through = 3.7.58...

WordPress Challan – PDF Invoice & Packing Slip for WooCommerce Plugin <= 3.4.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Challan – PDF Invoice & Packing Slip for WooCommerce Type Plugin Vulnerable versions = 3.4.8 Fixed in 3.4.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

Threat Outbreak Alert RuleID17316: Email Messages Distributing Malicious Software on August 12, 2015

Medium Alert ID: 40424 First Published: 2015 August 12 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17316 may contain the following files: Name |...