Lucene search
+L

599 matches found

OSV
OSV
•added 2023/12/28 11:15 a.m.•17 views

CVE-2023-32795

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

7.2CVSS7.3AI score0.00672EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/28 11:15 a.m.•30 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

5.8CVSS7.2AI score0.00672EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/28 10:43 a.m.•50 views

CVE-2023-32795 WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

8.2CVSS8.4AI score0.00672EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/28 10:43 a.m.•80 views

CVE-2023-32795

CVE-2023-32795 affects the WordPress plugin WooCommerce Product Add-Ons (

8.2CVSS7.5AI score0.00672EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•5 views

CVE-2023-32795: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

8.2CVSS7.5AI score0.00672EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/28 12:00 a.m.•19 views

WordPress Plugin Product Add-Ons Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

8.2CVSS6.8AI score0.00672EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/12/28 12:00 a.m.•21 views

WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection

Software YITH WooCommerce Product Add-Ons Type Plugin Vulnerable versions = 4.3.0 Fixed in 4.3.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-49777 Patch priority Medium CVSS severity Medium 9.1 Developer YITH PSID e13ee0c34e43 Credits Rafie Muhammad Patchstack...

9.1CVSS6.8AI score0.0069EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•16 views

PT-2023-24029 · WordPress · Woocommerce Product Add-Ons

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Add-Ons versions n/a through 6.1.3 Description: The issue is related to the deserialization of untrusted data in WooCommerce Product Add-Ons. This can potentially lead to security issues, but specific details about...

8.2CVSS7.3AI score0.00672EPSS
SaveExploits0References6
zdt
zdt
•added 2023/12/03 12:00 a.m.•252 views

WBCE CMS 1.6.1 Shell Upload Vulnerability

Exploit Title: WBCE CMS Version : 1.6.1 Remote Command Execution Exploit Author: tmrswrr Vendor Homepage: https://wbce-cms.org/ Software Link: https://github.com/WBCE/WBCECMS/archive/refs/tags/1.6.1.zip Version: 1.6.1 Tested on: https://www.softaculous.com/apps/cms/WBCECMS POC: 1 Login with admin...

7.4AI score
SaveExploits0
OSV
OSV
•added 2023/11/09 9:15 p.m.•14 views

CVE-2023-32794

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Add-Ons plugin = 6.1.3 versions...

8.8CVSS7.3AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/09 9:15 p.m.•27 views

CVE-2023-32794

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Add-Ons plugin = 6.1.3 versions...

8.8CVSS0.00301EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/09 9:15 p.m.•28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Add-Ons plugin = 6.1.3 versions...

6.8CVSS7.2AI score0.00301EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/09 8:35 p.m.•40 views

CVE-2023-32794 WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Add-Ons plugin = 6.1.3 versions...

5.4CVSS9AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/09 8:35 p.m.•46 views

CVE-2023-32794

CVE-2023-32794 corresponds to a CSRF vulnerability in the WooCommerce Product Add-ons plugin for WordPress, affecting versions

8.8CVSS8.9AI score0.00301EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/09 8:35 p.m.•20 views

CVE-2023-32794 WordPress WooCommerce Product Add-ons plugin <= 6.1.3 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in Woo WooCommerce Product Add-ons woocommerce-product-addons.This issue affects WooCommerce Product Add-ons: from n/a through = 6.1.3...

5.4CVSS8.5AI score0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•6 views

CVE-2023-32794: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Add-Ons plugin = 6.1.3 versions...

8.8CVSS8.2AI score0.00301EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/09 12:00 a.m.•17 views

PT-2023-24028 · WordPress · Woocommerce Product Add-Ons

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Add-Ons plugin versions = 6.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

8.8CVSS8.8AI score0.00301EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/09 12:00 a.m.•18 views

WordPress Plugin Product Add-Ons Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits0References2
OSV
OSV
•added 2023/11/06 9:15 p.m.•12 views

CVE-2023-5601

The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE...

9.8CVSS7.3AI score0.00877EPSS
SaveExploits2References1
Prion
Prion
•added 2023/11/06 9:15 p.m.•25 views

Default credentials

The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE...

7.5CVSS7.3AI score0.00877EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder