1180 matches found
PT-2025-44941
The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...
EUVD-2025-37493
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...
CVE-2025-63449
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...
CVE-2025-63449
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...
PT-2025-44776
Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description Water Management System version 1.0 is susceptible to Cross Site Scripting XSS within the /orders.php endpoint. The issue allows for the injection of malicious scripts through this endpoint...
CVE-2025-63449
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...
CVE-2025-63449
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /orders.php...
CVE-2025-53424
Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...
EUVD-2025-35459
Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...
CVE-2025-53424
The CVE-2025-53424 entry describes a Missing Authorization vulnerability in the vanquish WordPress plugin WooCommerce Orders & Customers Exporter (woocommerce-orders-ei) that allows exploitation of incorrectly configured access control. Affected product: WooCommerce Orders & Customers Exporter ve...
CVE-2025-53424 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...
CVE-2025-10570
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 via the saverefundrequest function. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit...
EUVD-2025-35351
The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 via the saverefundrequest function. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit...
PT-2025-43263
Name of the Vulnerable Software and Affected Versions WooCommerce Orders & Customers Exporter versions through 5.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for exploitation of the access control...
EUVD-2025-35206
Shopware Customer Orders can be canceled, even if refunds are disabled...
CVE-2025-62649
The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...
CVE-2025-62649
The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...
CVE-2025-62649
The RBI assistant platform (through 2025-09-06) relies on client-side authentication for submission of equipment orders, per CVE-2025-62649 and related CSAF/VIs. The connected ics/CSAF entries describe multiple issues, including: a remote unauthenticated attacker being able to create an account v...