Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-11671

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00288EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:37 a.m.•11 views

CVE-2024-11842

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS6.8AI score0.00221EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/25 6:02 p.m.•12 views

CVE-2025-32535

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce dn-shipping-by-weight allows Reflected XSS.This issue affects DN Shipping by Weight for WooCommerce: from n/a through = 1.2...

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•10 views

CVE-2025-32535

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce dn-shipping-by-weight allows Reflected XSS.This issue affects DN Shipping by Weight for WooCommerce: from n/a through = 1.2...

7.1CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:47 p.m.•56 views

CVE-2025-32535

CVE-2025-32535 describes a Reflected XSS in the WordPress plugin Shipping by Weight for WooCommerce (DN Shipping by Weight). Affected versions include up to 1.2; attack vector is network-based with user interaction (REFLECTED XSS). The CVE’s base metrics indicate a HIGH impact on confidentiality,...

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:47 p.m.•10 views

CVE-2025-32535 WordPress DN Shipping by Weight for WooCommerce Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce allows Reflected XSS. This issue affects DN Shipping by Weight for WooCommerce: from n/a through 1.2...

7.1CVSS7AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•9 views

PT-2025-17106 · Woocommerce · Dn Shipping By Weight For Woocommerce

Name of the Vulnerable Software and Affected Versions: DN Shipping by Weight for WooCommerce versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

7.1CVSS7.3AI score0.00288EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•3 views

CVE-2025-32535: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce dn-shipping-by-weight allows Reflected XSS.This issue affects DN Shipping by Weight for WooCommerce: from n/a through = 1.2...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/27 6:43 a.m.•12 views

WordPress DN Shipping by Weight for WooCommerce plugin < 1.2 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin DN Shipping by Weight for WooCommerce versions 1.2...

4.3CVSS7AI score0.00221EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/12/27 6:15 a.m.•30 views

CVE-2024-11842

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS0.00221EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/27 6:00 a.m.•71 views

CVE-2024-11842

The DN Shipping by Weight for WooCommerce WordPress plugin, in versions prior to 1.2 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a missing CSRF check when the plugin updates its settings. An attacker could exploit this to force a logged-in administrator to mod...

4.3CVSS6.5AI score0.00221EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/27 6:00 a.m.•8 views

CVE-2024-11842 DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.6AI score0.00221EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/27 6:00 a.m.•28 views

CVE-2024-11842 DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00221EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/27 12:00 a.m.•19 views

PT-2024-17290 · WordPress · Dn Shipping By Weight

Name of the Vulnerable Software and Affected Versions: DN Shipping by Weight for WooCommerce WordPress plugin version 1.2 and earlier Description: The issue concerns the lack of CSRF verification when updating the plugin's settings. This could allow attackers to make a logged-in administrator...

4.3CVSS9.2AI score0.00221EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•3 views

CVE-2024-11842: Cross-Site Request Forgery (CSRF)

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS5.8AI score0.00221EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•12 views

WordPress plugin DN Shipping by Weight for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS8.4AI score0.00221EPSS
SaveExploits1References1
Rows per page
Query Builder