Lucene search
K

5 matches found

CNNVD
CNNVD
added 2024/08/29 12:0 a.m.3 views

WordPress plugin Docket SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS7.8AI score0.00866EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/13 10:56 a.m.31 views

CVE-2024-43131 WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Incorrect Authorization vulnerability in WPWeb Docket WooCommerce Collections / Wishlist / Watchlist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

7.5CVSS0.00361EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/08/07 10:32 a.m.3 views

WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin <= 1.6.6 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Docket WooCommerce Collections / Wishlist / Watchlist versions 1.7.0...

9.8CVSS8.1AI score0.00866EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/07 10:30 a.m.3 views

WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Unauthenticated Arbitrary Post/Page Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Docket WooCommerce Collections / Wishlist / Watchlist versions 1.7.0...

7.5CVSS7AI score0.00361EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/07 12:0 a.m.8 views

WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) Plugin < 1.7.0 is vulnerable to Arbitrary Content Deletion

Software Docket WooCommerce Collections / Wishlist / Watchlist Type Plugin Vulnerable versions 1.7.0 Fixed in 1.7.0 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-43131 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID...

7.5CVSS6.5AI score0.00361EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder