EUVD-2023-34342

Malicious code in bioql PyPI...

EUVD-2023-34339

Malicious code in bioql PyPI...

EUVD-2023-43715

Malicious code in bioql PyPI...

EUVD-2023-34338

Malicious code in bioql PyPI...

EUVD-2024-35426

Malicious code in bioql PyPI...

CVE-2024-32452

Cross-Site Request Forgery CSRF vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2024-35667

Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2023-3023

The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-2894

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkdeactivateproduct function. This makes it possible for unauthenticated attackers to bulk deactivate...

CVE-2023-2893

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeactivateproduct function. This makes it possible for unauthenticated attackers to deactivate products via ...

CVE-2023-2891

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeleteproduct function. This makes it possible for unauthenticated attackers to delete products via a forged...

CVE-2023-2892

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkdeleteproduct function. This makes it possible for unauthenticated attackers to bulk delete products via...

CVE-2023-2896

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processduplicateproduct function. This makes it possible for unauthenticated attackers to duplicate products via a...

WordPress Shopping Cart & eCommerce Store plugin <= 5.7.8 - Missing Authorization to Order Updates vulnerability

Missing Authorization to Order Updates vulnerability discovered by Lucio Sá in WordPress Plugin WP EasyCart versions = 5.7.8...

WordPress Shopping Cart & eCommerce Store plugin <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter vulnerability

Authenticated Contributor+ SQL Injection via modelnumber Parameter vulnerability discovered by Lucio Sá in WordPress Plugin WP EasyCart versions = 5.7.2...

WordPress WP EasyCart Plugin <= 5.7.2 is vulnerable to SQL Injection

Software WP EasyCart Type Plugin Vulnerable versions = 5.7.2 Fixed in 5.7.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-7827 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 87563b6782da Credits Lucio Sá Required privilege Contributor Published 19...

CVE-2024-35667

Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2024-35667

CVE-2024-35667: Missing Authorization vulnerability in WP EasyCart ≤ 5.5.19. Affected: WP EasyCart plugin for WordPress. Base CVSS 3.1 v3: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N; Base score 5.3 (Medium). Root cause/affected versions are stated; no exploit details or remediation are provided in the i...

WordPress plugin WP EasyCart security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WP EasyCart < 5.6.0 - Missing Authorization

Description The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.5.19. This makes it possible for unauthenticated attackers to perform an unauthorized action...