Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1785 matches found

NVD
NVD•added 2026/03/13 7:55 p.m.•4 views

CVE-2026-32459

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL Injection.This issue affects UpsellWP: from n/a through = 2.2.4...

8.5CVSS0.00222EPSS
SaveExploits0References1
NVD
NVD•added 2026/03/13 7:54 p.m.•5 views

CVE-2026-32387

Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout for PayPal: from n/a through = 1.0.46...

5.3CVSS0.00219EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/03/13 11:42 a.m.•9 views

CVE-2026-32459

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL Injection.This issue affects UpsellWP: from n/a through = 2.2.4...

5.8AI score0.00222EPSS
SaveExploits0References2
CVE
CVE•added 2026/03/13 11:42 a.m.•13 views

CVE-2026-32459

The CVE describes an SQL Injection vulnerability (blind) in the WordPress UpsellWP plugin (checkout-upsell-and-order-bumps) affecting versions up to 2.2.4. Root cause: improper neutralization of special elements used in SQL commands. Impact stated as Blind SQL Injection, but no exploitation detai...

8.5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/03/13 11:42 a.m.•3 views

CVE-2026-32387

Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout for PayPal: from n/a through = 1.0.46...

5.8AI score0.00219EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/03/13 11:42 a.m.•2 views

CVE-2026-32387 WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability

Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout for PayPal: from n/a through = 1.0.46...

5.8AI score0.00219EPSS
SaveExploits0References1
CVE
CVE•added 2026/03/13 11:42 a.m.•14 views

CVE-2026-32387

CVE-2026-32387 concerns a missing authorization vulnerability in the WordPress plugin Checkout for PayPal (checkout-for-paypal). The flaw affects versions up to ≤ 1.0.46 and arises from incorrectly configured access control, enabling potential unauthorized access or actions due to insufficient pr...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/03/13 11:42 a.m.•32 views

CVE-2026-32387 WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability

Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout for PayPal: from n/a through = 1.0.46...

5.3CVSS0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/03/13 12:0 a.m.•6 views

PT-2026-25303

🟠 CVE-2026-32459 - High Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL Injection.This issue af... https://t.co/cgG00hiU3x https://t.co/E6pmdn1Kzn...

8.5CVSS5.8AI score0.00222EPSS
SaveExploits0References6
CNNVD
CNNVD•added 2026/03/13 12:0 a.m.•9 views

WordPress plugin Checkout for PayPal 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/03/13 12:0 a.m.•11 views

PT-2026-25234

Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout for PayPal: from n/a through = 1.0.46...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References4
Patchstack
Patchstack•added 2026/03/12 7:40 a.m.•8 views

WordPress Checkout Field Editor (Checkout Manager) for WooCommerce plugin <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field vulnerability

Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Checkout Field Editor Checkout Manager for WooCommerce versions = 2.1.7...

7.2CVSS5.8AI score0.00321EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD•added 2026/03/11 12:31 p.m.•11 views

EUVD-2026-11131

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to, and including, 2.1.7. This is due to the...

7.2CVSS5.9AI score0.00321EPSS
SaveExploits0References6
NVD
NVD•added 2026/03/11 10:16 a.m.•20 views

CVE-2026-3231

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to, and including, 2.1.7. This is due to the...

7.2CVSS0.00321EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB•added 2026/03/11 9:25 a.m.•4 views

CVE-2026-3231

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to, and including, 2.1.7. This is due to the...

7.2CVSS5.9AI score0.00321EPSS
SaveExploits0References7
Cvelist
Cvelist•added 2026/03/11 9:25 a.m.•38 views

CVE-2026-3231 Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to, and including, 2.1.7. This is due to the...

7.2CVSS0.00321EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/03/11 9:25 a.m.•3 views

CVE-2026-3231 Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to, and including, 2.1.7. This is due to the...

7.2CVSS5.9AI score0.00321EPSS
SaveExploits0References6
CVE
CVE•added 2026/03/11 9:25 a.m.•19 views

CVE-2026-3231

The CVE-2026-3231 entry concerns the WooCommerce plugin Checkout Field Editor (Checkout Manager) for WordPress, vulnerable to Stored Cross-Site Scripting via custom radio/checkboxgroup field values submitted through the WooCommerce Block Checkout Store API in all versions up to 2.1.7. The root ca...

7.2CVSS5.9AI score0.00321EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/03/11 3:31 a.m.•6 views

EUVD-2026-11073

The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11. This is due to missing ownership validation on the changeplansubid parameter in the processcheckout function. The ppressprocesscheckout AJAX handler accepts a...

8.1CVSS5.8AI score0.00379EPSS
SaveExploits0References6
NVD
NVD•added 2026/03/11 3:15 a.m.•11 views

CVE-2026-3453

The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11. This is due to missing ownership validation on the changeplansubid parameter in the processcheckout function. The ppressprocesscheckout AJAX handler accepts a...

8.1CVSS0.00379EPSS
SaveExploits0References5
Rows per page
Query Builder