Lucene search
+L

14 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-11590

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-37017

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:10 a.m.•19 views

CVE-2023-32796

Unauth. Stored Cross-Site Scripting XSS vulnerability in MingoCommerce WooCommerce Product Enquiry plugin = 2.3.4 versions...

7.1CVSS5.6AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/26 12:11 a.m.•19 views

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts delele-all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Posts: from n/a through = 1.1.1...

6.5CVSS5.9AI score0.00377EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/04/17 4:15 p.m.•12 views

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

6.5CVSS5.8AI score0.00377EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/17 4:15 p.m.•16 views

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

6.5CVSS0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:48 p.m.•72 views

CVE-2025-23773

CVE-2025-23773 concerns the WordPress Delete All Posts plugin (mingocommerce) with versions n/a–1.1.1, where a Missing Authorization vulnerability stems from incorrectly configured access control. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) indicates no network privileges required, ...

6.5CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•20 views

PT-2025-17023 · Unknown · Mingocommerce Delete All Posts

Name of the Vulnerable Software and Affected Versions: mingocommerce Delete All Posts versions n/a through 1.1.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•5 views

CVE-2025-23773: Missing Authorization

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

6.5CVSS5.9AI score0.00377EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/16 8:15 p.m.•28 views

CVE-2023-32796

Unauth. Stored Cross-Site Scripting XSS vulnerability in MingoCommerce WooCommerce Product Enquiry plugin = 2.3.4 versions...

7.1CVSS0.00403EPSS
SaveExploits0References1
OSV
OSV
•added 2023/11/16 8:15 p.m.•19 views

CVE-2023-32796

Unauth. Stored Cross-Site Scripting XSS vulnerability in MingoCommerce WooCommerce Product Enquiry plugin = 2.3.4 versions...

6.1CVSS7.3AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/16 7:57 p.m.•90 views

CVE-2023-32796

CVE-2023-32796 describes an unauthenticated stored XSS vulnerability in the WooCommerce Product Enquiry plugin for WordPress, affecting versions up to 2.3.4 (per the CVE listing). Patch sources indicate a fix in version 2.7.0; Red Hat/Red flags and other connected entries corroborate the vulnerab...

7.1CVSS5.9AI score0.00403EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/16 12:00 a.m.•5 views

PT-2023-24030

Name of the Vulnerable Software and Affected Versions MingoCommerce WooCommerce Product Enquiry plugin versions prior to 2.3.4 Description The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the applicatio...

7.1CVSS5.8AI score0.00403EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•4 views

CVE-2023-32796: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in MingoCommerce WooCommerce Product Enquiry plugin = 2.3.4 versions...

7.1CVSS6.4AI score0.00403EPSS
SaveExploits0References2
Rows per page
Query Builder