Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.14 views

EUVD-2023-44182

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.00637EPSS
Exploits1References2
OSV
OSV
added 2023/07/12 5:15 a.m.5 views

CVE-2023-3525

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without...

7.5CVSS7.3AI score0.00637EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/12 5:15 a.m.5 views

CVE-2023-3525

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without...

7.5CVSS5.8AI score0.00637EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2023/07/12 5:15 a.m.15 views

Authorization

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without...

5CVSS7.5AI score0.00637EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/07/12 4:38 a.m.37 views

CVE-2023-3525

CVE-2023-3525 affects the WordPress plugin Getnet Argentina para Woocommerce. The issue is authorization bypass caused by missing validation in the webhook function, allowing unauthenticated attackers to set a payment status to APPROVED without payment in versions up to and including 0.0.4. The v...

7.5CVSS7.5AI score0.00637EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/12 4:38 a.m.8 views

CVE-2023-3525

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without...

7.5CVSS7.5AI score0.00637EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/07/12 4:38 a.m.30 views

CVE-2023-3525

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without...

7.5CVSS7.7AI score0.00637EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.9 views

PT-2023-25198 · WordPress · Getnet Argentina Para Woocommerce

Name of the Vulnerable Software and Affected Versions: Getnet Argentina para Woocommerce plugin for WordPress versions up to, and including, 0.0.4 Description: The issue is related to authorization bypass due to missing validation on the webhook function. This allows unauthenticated attackers to...

7.5CVSS7.8AI score0.00637EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/07/12 12:0 a.m.3 views

WordPress Plugin Getnet Argentina para Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS7.8AI score0.00637EPSS
Exploits1References3
Patchstack
Patchstack
added 2023/07/10 12:0 a.m.10 views

WordPress Getnet Argentina para Woocommerce Plugin 0.0.1-0.0.4 is vulnerable to Broken Access Control

Software Getnet Argentina para Woocommerce Type Plugin Vulnerable versions 0.0.1-0.0.4 Fixed in 0.0.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-3525 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 026805019331 Credits Kijam...

7.5CVSS6.6AI score0.00637EPSS
Exploits1References3Affected Software1
WPVulnDB
WPVulnDB
added 2023/07/07 12:0 a.m.14 views

Getnet Argentina para Woocommerce < 0.0.5 - Unauthenticated Authorization Bypass

The plugin does not perform adequate validation on the 'webhook' function, which can lead to an unauthenticated user changing their payment status to 'APPROVED' without making an actual payment...

7.5CVSS7.5AI score0.00637EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder