InfoSec-Black-Friday

Ofertas de InfoSec Black Friday y Cyber Monday Edición 2025 de "InfoSec Cares" Todas las ofertas de software/herramientas relacionados con InfoSec para este próximo Black Friday y Cyber Monday. ¡TODOS LOS ENLACES ACTUALIZADOS PARA 2025! Muchos más en camino... Actualización personal rápida Despué...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

PT-2026-103773

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discount wizard/discount config during the process of creating discounts assigned to an event. This vulnerability allows JavaScript code t...

CVE-2026-96828

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

CVE-2026-96828 WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

CVE-2026-96828 WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

CVE-2026-96828

The WordPress Category Discount Woocommerce plugin (versions

EUVD-2026-89880

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

CVE-2026-96828: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

PT-2026-103212

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Category Discount Woocommerce versions = 5.18...

discount-3.0.2.0-1.1 on GA media (moderate)

discount-3.0.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11786-1 Rating: moderate Cross-References: CVE-2026-4833 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-56831

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

CVE-2026-56831

Shopper Framework (package shopper/framework), a headless e-commerce admin panel, is vulnerable to a business logic flaw (CWE-20) in versions prior to 2.9.0 . The /cpanel/discounts administrative interface accepts negative fixed_amount discount values without server-side validation, persisting th...

CVE-2026-56831 Shopper: Negative discount values accepted and propagated through order calculation pipeline

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

EUVD-2026-78917

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

CVE-2026-56831 Shopper: Negative discount values accepted and propagated through order calculation pipeline

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

OPENSUSE-SU-2026:11786-1 discount-3.0.2.0-1.1 on GA media

These are all security issues fixed in the discount-3.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

Shopper: Negative discount values accepted and propagated through order calculation pipeline

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

GHSA-5VF4-452P-JJHF Shopper: Negative discount values accepted and propagated through order calculation pipeline

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...