Lucene search
+L

287 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.11 views

WordPress Eyewear prescription form plugin <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion vulnerability discovered by WordFence in WordPress Plugin Eyewear prescription form versions = 6.0.1...

5.3CVSS5.9AI score0.00236EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/14 5:3 a.m.17 views

CVE-2025-14366

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthenticated attackers to create arbitrary...

5.3CVSS6.1AI score0.00236EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.7 views

EUVD-2025-203206

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary WooCommerce...

5.3CVSS5.5AI score0.00236EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/13 4:16 p.m.5 views

CVE-2025-14366

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthenticated attackers to create arbitrary...

5.3CVSS0.00236EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/13 4:16 p.m.6 views

CVE-2025-14365

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary WooCommerce...

5.3CVSS0.00236EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/13 4:31 a.m.34 views

CVE-2025-14365 Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary WooCommerce...

5.3CVSS0.00236EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/13 4:31 a.m.21 views

CVE-2025-14365

The Eyewear prescription form plugin for WordPress (WordPress Eyewear prescription form) is affected by CVE-2025-14365. A Missing Authorization flaw in the RemoveItems AJAX action exists in all versions up to 6.0.1, enabling unauthenticated attackers to delete arbitrary WooCommerce product catego...

5.3CVSS5.6AI score0.00236EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/13 4:31 a.m.5 views

CVE-2025-14365 Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary WooCommerce...

5.3CVSS5.6AI score0.00236EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/13 4:31 a.m.32 views

CVE-2025-14366 Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthenticated attackers to create arbitrary...

5.3CVSS0.00236EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/13 4:31 a.m.4 views

CVE-2025-14366 Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthenticated attackers to create arbitrary...

5.3CVSS5.7AI score0.00236EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/13 4:31 a.m.27 views

CVE-2025-14366

CVE-2025-14366 concerns the WordPress plugin Eyewear prescription form. The WordPress plugin is reported to have missing authorization on the SubmitCatProductRequest AJAX action, affecting all versions up to and including 6.0.1. The vulnerability enables unauthenticated attackers to create arbitr...

5.3CVSS5.7AI score0.00236EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/13 12:11 a.m.11 views

WordPress Eyewear prescription form plugin <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation vulnerability

Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation vulnerability discovered by WordFence in WordPress Plugin Eyewear prescription form versions = 6.0.1...

5.3CVSS6.8AI score0.00236EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.4 views

WordPress plugin Eyewear prescription form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00236EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/13 12:0 a.m.13 views

PT-2025-51066

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthenticated attackers to create arbitrary...

5.3CVSS6.1AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/13 12:0 a.m.8 views

PT-2025-51065

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary WooCommerce...

5.3CVSS5.9AI score0.00236EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.8 views

WordPress plugin Eyewear prescription form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.7AI score0.00236EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-6873

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-12828

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00443EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-50234

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00413EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-50254

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00515EPSS
SaveExploits1References5
Rows per page
Query Builder