744 matches found
WordPress Plugin Gestpay for WooCommerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Plugin Gestpay for WooCommerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-15557 · WordPress · Gestpay For Woocommerce
Name of the Vulnerable Software and Affected Versions: Gestpay for WooCommerce plugin for WordPress versions up to, and including, 20221130 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax unset default card function. This...
PT-2024-16355 · WordPress · Booster For Woocommerce
Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce plugin for WordPress versions up to, and including, 7.1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wcj product barcode' shortcode due to insufficient input sanitization and...
WordPress Booster for WooCommerce Plugin <= 7.1.6 is vulnerable to Cross Site Scripting (XSS)
Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.6 Fixed in 7.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1054 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 78adec7bfe60 Credits Ngô Thiên An...
Booster for WooCommerce < 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Description The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wcjproductbarcode' shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'color'...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artios Media Product Code for WooCommerce allows Stored XSS.This issue affects Product Code for WooCommerce: from n/a through 1.4.4...
CVE-2023-51669
CVE-2023-51669 concerns the WordPress plugin Product Code for WooCommerce (Artios Media) and is a Stored XSS vulnerability. It affects Product Code for WooCommerce versions from n/a through 1.4.4. The issue requires authenticated access (Contributor+ or higher) and is triggered during web page ge...
CVE-2023-52127
Cross-Site Request Forgery CSRF vulnerability in WPClever WPC Product Bundles for WooCommerce.This issue affects WPC Product Bundles for WooCommerce: from n/a through 7.3.1...
WordPress Quotes for WooCommerce Plugin <= 2.0.1 is vulnerable to Broken Access Control
Software Quotes for WooCommerce Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51680 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ace2b6bbf64b Credits Abdi Pranata Required...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY – Multi Currency for WooCommerce allows Stored XSS.This issue affects CURCY – Multi Currency for WooCommerce: from n/a through 2.2.0...
WordPress plugin Doofinder for WooCommerce Input Validation Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
CVE-2023-49840 WordPress Multi Currency For WooCommerce Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For WooCommerce: from n/a through 1.5.5...
CVE-2023-49185 WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7...
CVE-2023-48333
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1...
CVE-2023-48742
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue affects License Manager for WooCommerce: from n/a through 2.2.10...
WordPress Plugin Product Stock Manager & Notifier for WooCommerce Information Disclosure Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Product Stock Manager &...
PT-2023-26219 · Woocommerce · Product Stock Manager & Notifier For Woocommerce
Name of the Vulnerable Software and Affected Versions: Product Stock Manager & Notifier for WooCommerce versions through 2.0.1 Description: The issue is related to Exposure of Sensitive Information to an Unauthorized Actor, affecting the Product Stock Manager & Notifier for WooCommerce...