Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/10/23 3:14 p.m.•17 views

CVE-2025-49950

Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through = 4.3.0...

7.2CVSS5.9AI score0.00478EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•16 views

EUVD-2025-35511

Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through = 4.2.5...

6.5AI score0.00478EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:15 p.m.•14 views

CVE-2025-49950

Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through = 4.3.0...

7.2CVSS0.00478EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•5 views

CVE-2025-49950: Missing Authorization

Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through = 4.3.0...

7.2CVSS5.8AI score0.00478EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/31 12:00 a.m.•30 views

CVE-2022-3420 Official Integration for Billingo < 3.4.0 - ShopManager+ Stored XSS

The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks...

5.1AI score0.00515EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•6 views

CVE-2022-3420: Improper Neutralization of Input During Web Page Generation

The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks...

4.8CVSS5.7AI score0.00515EPSS
SaveExploits2References2
Rows per page
Query Builder