1792 matches found
CVE-2009-5059
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...
CVE-2025-47504
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Custom Checkout Fields for WooCommerce custom-checkout-fields-for-woocommerce allows Stored XSS.This issue affects Custom Checkout Fields for WooCommerce: from n/a through = 1.8.3...
CVE-2025-47685
Cross-Site Request Forgery CSRF vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through = 2.0.03...
WordPress Contribuinte Checkout plugin <= 2.0.03 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Contribuinte Checkout versions = 2.0.03...
CVE-2025-47685
Cross-Site Request Forgery CSRF vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through = 2.0.03...
CVE-2025-47592
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Árpád Lehel Mátyus Terms Popup On User Login terms-popup-on-user-login allows Stored XSS.This issue affects Terms Popup On User Login: from n/a through = 2.0.8...
CVE-2025-47685 WordPress Contribuinte Checkout plugin <= 2.0.02 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Moloni Contribuinte Checkout allows Stored XSS. This issue affects Contribuinte Checkout: from n/a through 2.0.02...
CVE-2025-47685
CVE-2025-47685 affects the WordPress plugin Contribuinte Checkout (versions up to and including 2.0.02). It combines CSRF to enable Stored XSS in the plugin. The CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, requiring user interaction, and impacts to confidentiality, integrity, a...
CVE-2025-47592
CVE-2025-47592 refers to a stored XSS in the WordPress plugin Terms Popup On User Login (TPUL) for User Login and WooCommerce Checkout. Root cause: improper input neutralization during web page generation. Affected versions: TPUL <= 2.0.3 (n/a through 2.0.3). Impact: stored Cross-Site Scriptin...
CVE-2025-47504
CVE-2025-47504 documents a stored XSS in two WordPress WooCommerce plugins: Custom Checkout Fields for WooCommerce (affected <=1.8.3) and Email Verification for WooCommerce (affected
WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Custom Checkout Fields for WooCommerce versions = 1.8.3...
PT-2025-20227 · Unknown · Moloni Contribuinte Checkout
Name of the Vulnerable Software and Affected Versions: Moloni Contribuinte Checkout versions n/a through 2.0.02 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...
WordPress plugin Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL 跨站脚本漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress plugin Legal Terms and Conditions Popup for User Login and...
PT-2025-20169 · Unknown · Lehel Mátyus Legal Terms/Conditions Popup For User Login/Woocommerce Checkout
Name of the Vulnerable Software and Affected Versions: Lehel Mátyus Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL versions 2.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored...
WordPress plugin Contribuinte Checkout 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress plugin Custom Checkout Fields for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-3889
The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the 'processpaymentdata' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the...
CVE-2025-3889
The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the 'processpaymentdata' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the...
PT-2025-18383 · WordPress · Wordpress Simple Shopping Cart
Name of the Vulnerable Software and Affected Versions: WordPress Simple Shopping Cart plugin versions up to, and including, 5.1.3 Description: The issue allows unauthenticated attackers to manipulate the quantity of a product to a negative number, effectively subtracting the product cost from the...
CVE-2025-46499
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hccoder PayPal Express Checkout paypal-express-checkout allows Stored XSS.This issue affects PayPal Express Checkout: from n/a through = 2.1.2...