Lucene search
+L

15446 matches found

Cvelist
Cvelist
•added 2025/11/13 9:24 a.m.•28 views

CVE-2025-64382 WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-import-export-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Export & Order Import for WooCommerce: from n/a through = 2.6.7...

4.3CVSS0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/13 9:24 a.m.•10 views

CVE-2025-64382 WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-import-export-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Export & Order Import for WooCommerce: from n/a through = 2.6.7...

4.3CVSS6AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/13 4:15 a.m.•21 views

CVE-2025-12733

The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...

8.8CVSS0.00682EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/11/13 3:27 a.m.•13 views

CVE-2025-12733 Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic

The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...

8.8CVSS6.7AI score0.00682EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/13 3:27 a.m.•36 views

CVE-2025-12733 Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic

The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...

8.8CVSS0.00682EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/13 3:27 a.m.•19 views

EUVD-2025-150407

The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...

8.8CVSS7.6AI score0.00682EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/13 3:27 a.m.•47 views

CVE-2025-12733

CVE-2025-12733 affects the WordPress plugin Import any XML, CSV or Excel File to WordPress (WP All Import) up to version 3.9.6. The issue is an authenticated (Administrator+) Remote Code Execution via crafted import templates, caused by the use of eval() on unsanitized input in pmxi_if within hel...

8.8CVSS6.7AI score0.00682EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•9 views

EUVD-2025-177517

Malicious code in nu-grid-import-chi-assert npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/13 3:23 a.m.•17 views

Malicious code in tau-import-float-monitor-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/11/13 3:23 a.m.•12 views

MAL-2025-188365 Malicious code in nu-grid-import-chi-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f766004c24652d0932dc06aa4b8466f33c8f680b403bc5562d701a3973417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•15 views

EUVD-2025-176243

Malicious code in spy-sun-byte-debug-import npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•13 views

EUVD-2025-176058

Malicious code in tau-import-file-bad-byte npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•11 views

EUVD-2025-175961

Malicious code in theta-air-char-import-phi npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•13 views

EUVD-2025-175549

Malicious code in wind-sun-stub-function-import npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•4 views

EUVD-2025-177518

Malicious code in nu-double-import-theta-old npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•7 views

EUVD-2025-177434

Malicious code in optimize-cache-static-orchestrate-import npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•10 views

EUVD-2025-177216

Malicious code in phi-void-long-reject-import npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•11 views

EUVD-2025-177042

Malicious code in process-float-sanitize-module-import npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•9 views

EUVD-2025-176831

Malicious code in quick-info-star-new-import npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•5 views

EUVD-2025-176326

Malicious code in small-validate-psi-import-stack npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder