Lucene search
K

35 matches found

Patchstack
Patchstack
added 2026/05/01 9:32 a.m.2 views

WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Custom WooCommerce Checkout Fields Editor versions = 1.3.4...

6.1CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-26978

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00026EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-9278

Malicious code in bioql PyPI...

4.3CVSS6.2AI score0.00341EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-34536

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00183EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/07 2:33 p.m.1 views

CVE-2025-58799

Cross-Site Request Forgery CSRF vulnerability in themelocation Custom WooCommerce Checkout Fields Editor add-fields-to-checkout-page-woocommerce allows Cross Site Request Forgery.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through = 1.3.4...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
NVD
NVD
added 2025/09/05 2:15 p.m.1 views

CVE-2025-58799

Cross-Site Request Forgery CSRF vulnerability in themelocation Custom WooCommerce Checkout Fields Editor add-fields-to-checkout-page-woocommerce allows Cross Site Request Forgery.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through = 1.3.4...

4.3CVSS0.00026EPSS
Exploits0References1
CVE
CVE
added 2025/09/05 1:45 p.m.9 views

CVE-2025-58799

CVE-2025-58799 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Custom WooCommerce Checkout Fields Editor (themelocation) up to version 1.3.4. The issue is confirmed by multiple sources in the connected documents (Patchstack, CVE records, Red Hat advisory refere...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 1:45 p.m.2 views

CVE-2025-58799 WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in themelocation Custom WooCommerce Checkout Fields Editor add-fields-to-checkout-page-woocommerce allows Cross Site Request Forgery.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through = 1.3.4...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/05 1:22 p.m.3 views

WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Custom WooCommerce Checkout Fields Editor versions = 1.3.4...

4.3CVSS6.8AI score0.00026EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

WordPress plugin Custom WooCommerce Checkout Fields Editor Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS5.7AI score0.00026EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.2 views

PT-2025-36139

Name of the Vulnerable Software and Affected Versions: themelocation Custom WooCommerce Checkout Fields Editor versions through 1.3.4 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users...

4.3CVSS6.2AI score0.00026EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:15 a.m.0 views

CVE-2024-30518

Cross-Site Request Forgery CSRF vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0...

4.3CVSS8.6AI score0.0016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 4:40 p.m.5 views

CVE-2025-31752

Missing Authorization vulnerability in termel Bulk Fields Editor bulk-user-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Fields Editor: from n/a through = 1.8.0...

4.3CVSS7.2AI score0.00341EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/01 3:48 p.m.4 views

WordPress Bulk Fields Editor plugin <= 1.8.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Bulk Fields Editor versions = 1.8.0...

4.3CVSS8.5AI score0.00341EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.5 views

CVE-2025-31752

Missing Authorization vulnerability in termel Bulk Fields Editor bulk-user-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Fields Editor: from n/a through = 1.8.0...

4.3CVSS0.00341EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.47 views

CVE-2025-31752

CVE-2025-31752: Missing Authorization in Bulk Fields Editor (WordPress plugin) may allow unauthorized access due to misconfigured access controls. Affected: Bulk Fields Editor versions up to 1.8.0 (listed as vulnerable from n/a to 1.8.0). CVSS 3.1 base score 4.3 (Medium). No exploits, root-cause,...

4.3CVSS7.2AI score0.00341EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.3 views

WordPress plugin Bulk Fields Editor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.1AI score0.00341EPSS
Exploits0References2
NVD
NVD
added 2024/05/14 3:38 p.m.10 views

CVE-2024-33956

Missing Authorization vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0...

4.3CVSS5.1AI score0.00183EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/02 11:24 a.m.16 views

CVE-2024-33956 WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0...

4.3CVSS5.4AI score0.00183EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/02 12:0 a.m.3 views

PT-2024-25588 · Woocommerce · Custom Woocommerce Checkout Fields Editor

Name of the Vulnerable Software and Affected Versions: Custom WooCommerce Checkout Fields Editor versions 1.3.0 and earlier Description: A Missing Authorization issue has been identified. This issue affects the Custom WooCommerce Checkout Fields Editor, allowing potential unauthorized access...

4.3CVSS6.5AI score0.00183EPSS
Exploits0References3
Rows per page
Query Builder