6637 matches found
CVE-2025-7827 Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the niwoocpraction function in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-leve...
CVE-2025-7827 Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the niwoocpraction function in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-leve...
WordPress plugin Ni WooCommerce Customer Product Report Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2025-34509 · WordPress · Ni Woocommerce Customer Product Report
Name of the Vulnerable Software and Affected Versions: Ni WooCommerce Customer Product Report plugin for WordPress versions up to and including 1.2.4 Description: The Ni WooCommerce Customer Product Report plugin for WordPress is susceptible to unauthorized data modification. This is due to a...
WordPress Ni WooCommerce Customer Product Report plugin <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability
Missing Authorization to Authenticated Subscriber+ Settings Update vulnerability discovered by ch4r0n in WordPress Plugin Ni WooCommerce Customer Product Report versions = 1.2.4...
CVE-2025-7051
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...
CVE-2025-9237
A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/myaccount.php?editaccount of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. It is possible to initiate the...
CVE-2025-9237
CodeAstro Ecommerce Website 1.0 is affected by a cross-site scripting (XSS) issue in the Edit Your Account Page, specifically via manipulation of the Username parameter in /customer/my_account.php?edit_account. The vulnerability originates from an unknown function in that page; exploitation can b...
Exploit for CVE-2025-55444
CVE Reports by Anudeep Kadambala This repository contains det...
Manpower Data Breach Hits 144K, Workday Confirms 3rd-Party CRM Hack
A cyberattack on Manpower's Michigan office compromised data for 144,000 people. Meanwhile, Workday reveals a data breach in…...
CVE-2025-8908
A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...
Malicious code in eca-customer-web (npm)
The package eca-customer-web was found to contain malicious code...
Malicious code in customer-account-ui-extensions (npm)
The package customer-account-ui-extensions was found to contain malicious code...
Malicious code in hw-customer-stats (npm)
The package hw-customer-stats was found to contain malicious code...
Malicious code in generator-watson-voice-of-the-customer (npm)
The package generator-watson-voice-of-the-customer was found to contain malicious code...
Malicious code in uw-service-customer-services (npm)
The package uw-service-customer-services was found to contain malicious code...
Malicious code in customer-account-ui-extensions-react (npm)
The package customer-account-ui-extensions-react was found to contain malicious code...
MAL-2025-21312 Malicious code in generator-watson-social-customer-care (npm)
The package generator-watson-social-customer-care was found to contain malicious code...