7 matches found
PT-2026-95808
Name of the Vulnerable Software and Affected Versions Empik for Woocommerce versions prior to 1.5.2 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or...
PT-2024-38036 · WordPress · Smart Online Order For Clover
Name of the Vulnerable Software and Affected Versions: The Smart Online Order for Clover plugin for WordPress versions up to, and including, 1.5.6 Description: The issue allows authenticated attackers with Subscriber-level access and above to update product and category descriptions, category...
PT-2023-12503
Name of the Vulnerable Software and Affected Versions The Ultimate Gift Cards for WooCommerce plugin for WordPress versions up to, and including, 2.1.1 Description The issue is due to missing or incorrect nonce validation on the mwb wgm save post function, making it possible for unauthenticated...
Chengdu Silo Technology Co., Ltd. mall system has a logic flaw vulnerability
Chengdu Silo Technology Co., Ltd. is a well-known professional Internet infrastructure service operator in Chengdu and a leading e-commerce informationization operation service provider in China. Chengdu Silo Technology Co., Ltd. mall system has a logic flaw vulnerability that can be exploited by...
Fuyang Xinpin Network Technology Co., Ltd. website building system has logical design loopholes
Fuyang Xinpin Network Technology Co., Ltd. is a technical enterprise focusing on providing full network marketing solutions for the majority of tourism enterprises. Fuyang Xinpin Network Technology Co., Ltd. station-building system has a logical design loophole, which can be exploited by attacker...
PT-2014-5237
Name of the Vulnerable Software and Affected Versions Cisco Transport Gateway for Smart Call Home version 4.0 Description The issue concerns the web framework in the Cisco Transport Gateway for Smart Call Home, which fails to properly check authorization for administrative web pages. This allows...
