CVE-2025-63449

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...

CVE-2025-63449

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...

CVE-2025-63449

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...

PT-2025-44776

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description Water Management System version 1.0 is susceptible to Cross Site Scripting XSS within the /orders.php endpoint. The issue allows for the injection of malicious scripts through this endpoint...

CVE-2025-53424

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

EUVD-2025-35459

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

CVE-2025-53424 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

CVE-2025-53424

The CVE-2025-53424 entry describes a Missing Authorization vulnerability in the vanquish WordPress plugin WooCommerce Orders & Customers Exporter (woocommerce-orders-ei) that allows exploitation of incorrectly configured access control. Affected product: WooCommerce Orders & Customers Exporter ve...

CVE-2025-10570

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 via the saverefundrequest function. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit...

EUVD-2025-35351

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 via the saverefundrequest function. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit...

CVE-2025-53424: Missing Authorization

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

PT-2025-43263

Name of the Vulnerable Software and Affected Versions WooCommerce Orders & Customers Exporter versions through 5.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for exploitation of the access control...

EUVD-2025-35206

Shopware Customer Orders can be canceled, even if refunds are disabled...

CVE-2025-62649

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...

CVE-2025-62649

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...

EUVD-2025-34923

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...

CVE-2025-62649

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...

CVE-2025-62649: Use of Client-Side Authentication

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...

PT-2025-42662

Name of the Vulnerable Software and Affected Versions Restaurant Brands International RBI assistant platform versions through 2025-09-06 Description The Restaurant Brands International RBI assistant platform through 2025-09-06 utilizes client-side authentication when submitting equipment orders...

CVE-2025-62649

The RBI assistant platform (through 2025-09-06) relies on client-side authentication for submission of equipment orders, per CVE-2025-62649 and related CSAF/VIs. The connected ics/CSAF entries describe multiple issues, including: a remote unauthenticated attacker being able to create an account v...