50 matches found
PT-2026-84135
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom order' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
WordPress Custom Order Numbers for WooCommerce plugin missing authorization vulnerability
The WordPress Custom Order Numbers for WooCommerce plugin is an open source plugin for WooCommerce an e-commerce plugin for WordPress designed to allow users to customize the rules for generating order numbers. WordPress Custom Order Numbers for WooCommerce plugin suffers from a missing...
CVE-2025-66071
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: from n/a through = 1.11.0...
WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Custom Order Numbers for WooCommerce versions = 1.11.0...
EUVD-2025-198472
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: from n/a through = 1.11.0...
CVE-2025-66071
CVE-2025-66071 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Custom Order Numbers for WooCommerce (versions up to and including 1.11.0). The issue allows exploitation due to incorrectly configured access control, with a CVSS v3.1 base score of 5.3 (Mediu...
CVE-2025-66071 WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: from n/a through = 1.11.0...
CVE-2025-66071 WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: from n/a through = 1.11.0...
PT-2025-47744
Name of the Vulnerable Software and Affected Versions Custom Order Numbers for WooCommerce versions through 1.11.0 Description The software contains a flaw related to incorrectly configured access control security levels, leading to a missing authorization issue. This allows for exploitation of t...
WordPress plugin Custom Order Numbers for WooCommerce 安全漏洞
The WordPress Custom Order Numbers for WooCommerce plugin is an open source plugin for WooCommerce an e-commerce plugin for WordPress designed to allow users to customize the rules for generating order numbers. WordPress Custom Order Numbers for WooCommerce plugin suffers from a missing...
CVE-2025-66071: Missing Authorization
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: from n/a through = 1.11.0...
EUVD-2024-30326
Malicious code in bioql PyPI...
EUVD-2024-23232
Malicious code in bioql PyPI...
EUVD-2022-48264
Malicious code in bioql PyPI...
CVE-2024-32524
Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...
CVE-2024-25930
Cross-Site Request Forgery CSRF vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...
CVE-2022-45367
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...
CVE-2021-24846
The getquery function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocosajax AJAX action, available to all authenticated users, does not properly sanitise the sort parameter before using it in a SQL statement, leading to an SQL injection, exploitable by...
PT-2024-17270
Name of the Vulnerable Software and Affected Versions Additional Custom Order Status for WooCommerce plugin for WordPress versions up to, and including, 1.6.0 Description The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...
CVE-2024-11814: Improper Neutralization of Input During Web Page Generation
The Additional Custom Order Status for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wfwpwcosdeletefinished, wfwpwcosdeletefallbackfinished, wfwpwcosdeletefallbackordersupdated, and wfwpwcosdeletefallbackstatus parameters in all versions up to, and...