Lucene search
+L

1394 matches found

NVD
NVD
added 2025/04/05 6:15 a.m.14 views

CVE-2025-2789

The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletetablerateshippingrow function in all versions up to, and...

6.5CVSS0.00358EPSS
SaveExploits0References3
CVE
CVE
added 2025/04/05 5:32 a.m.67 views

CVE-2025-2789

CVE-2025-2789 affects MultiVendorX – WooCommerce Multivendor Marketplace Solutions,

6.5CVSS5.2AI score0.00358EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/05 5:32 a.m.14 views

CVE-2025-2789 MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion

The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletetablerateshippingrow function in all versions up to, and...

5.3CVSS6.8AI score0.00358EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/04/05 5:32 a.m.28 views

CVE-2025-2789 MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion

The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletetablerateshippingrow function in all versions up to, and...

5.3CVSS0.00358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/05 12:00 a.m.10 views

PT-2025-15057 · WordPress · Multivendorx

Name of the Vulnerable Software and Affected Versions: The MultiVendorX plugin for WordPress versions up to, and including, 4.2.19 Description: The issue is related to a missing capability check on the delete table rate shipping row function, which allows unauthorized loss of data. This makes it...

6.5CVSS6.1AI score0.00358EPSS
SaveExploits0References11
NVD
NVD
added 2025/04/04 4:15 p.m.10 views

CVE-2025-32207

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

6.5CVSS0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.23 views

CVE-2025-32207 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

6.5CVSS0.00392EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 3:59 p.m.11 views

CVE-2025-32207 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

6.5CVSS7.2AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.14 views

WordPress plugin Ni WooCommerce Cost Of Goods 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00392EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/03 4:31 p.m.10 views

CVE-2025-31826

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

5.4CVSS7.2AI score0.00439EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/02 6:31 a.m.22 views

CVE-2025-31414

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder allows Stored XSS.This issue affects Cost Calculator Builder: from n/a through = 3.2.65...

6.5CVSS7.2AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.13 views

CVE-2025-31826

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

5.4CVSS0.00439EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.23 views

CVE-2025-31826 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

5.4CVSS0.00439EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.9 views

WordPress plugin Ni WooCommerce Cost Of Goods 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.3AI score0.00439EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.9 views

PT-2025-14206 · Unknown · Ni Woocommerce Cost Of Goods

Name of the Vulnerable Software and Affected Versions: Ni WooCommerce Cost Of Goods versions 3.2.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Ni...

5.4CVSS6.2AI score0.00439EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/31 6:15 a.m.20 views

CVE-2025-31414

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder allows Stored XSS.This issue affects Cost Calculator Builder: from n/a through = 3.2.65...

6.5CVSS0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 6:07 a.m.9 views

CVE-2025-31414 WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stylemix Cost Calculator Builder allows Stored XSS. This issue affects Cost Calculator Builder: from n/a through 3.2.65...

6.5CVSS6.4AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/31 6:07 a.m.65 views

CVE-2025-31414

CVE-2025-31414 is a Stored Cross-Site Scripting vulnerability in the Cost Calculator Builder WordPress plugin, affecting versions from unknown (n/a) up to 3.2.65. The issue is triggered during web page generation via improper neutralization of input, enabling stored XSS as described in the vulner...

6.5CVSS7.2AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/31 6:07 a.m.31 views

CVE-2025-31414 WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder allows Stored XSS.This issue affects Cost Calculator Builder: from n/a through = 3.2.65...

6.5CVSS0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:00 a.m.8 views

WordPress plugin Cost Calculator Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.9AI score0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder