3 matches found
PT-2024-10851 · WordPress · Woocommerce Smart Coupons
Name of the Vulnerable Software and Affected Versions: WooCommerce Smart Coupons plugin for WordPress versions up to, and including, 4.6.0 Description: The issue is related to authorization bypass due to a missing capability check on the woocommerce coupon admin init function. This allows...
5.3CVSS7.3AI score0.00213EPSS
SaveExploits0References18
CVE-2018-20572
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...
9.8CVSS9.9AI score0.01537EPSS
SaveExploits1References1
Sql injection
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...
7.5CVSS9.8AI score0.01537EPSS
SaveExploits2References1Affected Software1
20