23 matches found
EUVD-2025-4319
Malicious code in bioql PyPI...
EUVD-2025-17185
Malicious code in bioql PyPI...
CVE-2025-29006
Missing Authorization vulnerability in centangle Direct Checkout for WooCommerce Lite woo-direct-checkout-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Direct Checkout for WooCommerce Lite: from n/a through = 1.0.3...
CVE-2025-29006
Missing Authorization vulnerability in centangle Direct Checkout for WooCommerce Lite woo-direct-checkout-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Direct Checkout for WooCommerce Lite: from n/a through = 1.0.3...
CVE-2025-29006
CVE-2025-29006 describes a Missing Authorization vulnerability in Direct Checkout for WooCommerce Lite, affecting version range from n/a up to 1.0.3. The CVSS 3.1 base score is 5.3 (Network, Low attack complexity, Pr& Permission: None, Confidentiality: None, Integrity: Low, Availability: None). P...
WordPress plugin Direct Checkout for WooCommerce Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2025-24141 · Woocommerce · Direct Checkout For Woocommerce Lite
Name of the Vulnerable Software and Affected Versions: Direct Checkout for WooCommerce Lite versions 1.0.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions...
WordPress Direct Checkout for WooCommerce Lite plugin <= 1.0.3 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Hlong in WordPress Plugin Direct Checkout for WooCommerce Lite versions = 1.0.3...
CVE-2025-27347
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techmix Direct Checkout Button for WooCommerce woo-direct-checkout-button allows Stored XSS.This issue affects Direct Checkout Button for WooCommerce: from n/a through = 1.0...
WordPress Direct Checkout Button for WooCommerce plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Direct Checkout Button for WooCommerce versions = 1.0...
CVE-2025-27347
CVE-2025-27347 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Direct Checkout Button for WooCommerce . The issue arises from improper neutralization of input during web page generation, enabling stored XSS. Affected software is the Direct Checkout Button for WooComme...
CVE-2025-27347 WordPress Direct Checkout Button for WooCommerce plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techmix Direct Checkout Button for WooCommerce woo-direct-checkout-button allows Stored XSS.This issue affects Direct Checkout Button for WooCommerce: from n/a through = 1.0...
WordPress plugin Direct Checkout Button for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2025-7761 · Woocommerce · Direct Checkout Button For Woocommerce
Name of the Vulnerable Software and Affected Versions: Direct Checkout Button for WooCommerce versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for Stored...
CVE-2023-47657
Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...
CVE-2023-47657
Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...
WordPress Plugin Direct Checkout - Quick View - Buy Now For WooCommerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress Plugin Direct Checkout -...
CVE-2023-47657
CVE-2023-47657 affects GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin up to version 1.5.8. It is a Stored XSS vulnerability exploitable by an authenticated user with Shop Manager+ privileges. Patch status: fixed in 1.5.9 (per Patchstack); NVD lists CVSSv3.1 base 4.8 (m...
PT-2023-30543 · Grandplugins · Grandplugins Direct Checkout – Quick View – Buy Now For Woocommerce
Name of the Vulnerable Software and Affected Versions: GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin versions = 1.5.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by an authenticated user wit...
CVE-2023-28988
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin = 2.1.48 versions...