Lucene search
+L

6 matches found

CNVD
CNVD
added 2021/05/20 12:0 a.m.8 views

WordPress Authorization Issue Vulnerability (CNVD-2021-36539)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . An authorization issue vulnerability exists in versions o...

8.8CVSS6.6AI score0.01325EPSS
Exploits2References1
Prion
Prion
added 2021/05/14 12:15 p.m.17 views

Code injection

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...

6.5CVSS8.7AI score0.01325EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2021/05/14 11:38 a.m.24 views

CVE-2021-24190 WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...

8.8AI score0.01325EPSS
Exploits2References1
CVE
CVE
added 2021/05/14 11:38 a.m.46 views

CVE-2021-24190

CVE-2021-24190 affects the WooCommerce Conditional Marketing Mailer WordPress plugin prior to version 1.5.2. Low-privilege users can exploit the AJAX action cp_plugins_do_button_job_later_callback to install any plugin (including specific versions) from the WordPress repository and to activate ar...

8.8CVSS8.8AI score0.01325EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2021/05/14 12:0 a.m.9 views

WordPress plugin WooCommerce Conditional Marketing Mailer 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . An authorization issue vulnerability exists in versions o...

8.8CVSS5.8AI score0.01325EPSS
Exploits2References2
Patchstack
Patchstack
added 2021/04/22 12:0 a.m.7 views

WordPress Conditional Marketing Mailer for WooCommerce plugin <= 1.5.1 - Arbitrary Plugin Installation and Activation vulnerability

Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress Conditional Marketing Mailer for WooCommerce plugin versions = 1.5.1. Solution Update the WordPress Conditional Marketing Mailer for WooCommerce plugin to the latest available version at least 1.5.2...

3.9AI score
Exploits0References1Affected Software1
Rows per page
Query Builder