CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

56 matches found

Kitploit•added 2026/10/03 10:12 a.m.•12 views

PagSeguro-Connect-Para-WooCommerce-CVE-Report

PagSeguro-Connect-Para-WooCommerce-CVE-Report CVE-2025-10142 공개 CVE-2025-10142 - PagSeguro-Connect-para-WooCommerce 취약점 이 저장소는 Ricardo Martins가 개발한 WordPress 플러그인 PagSeguro-Connect-para-WooCommerce prepare 사용 없이 SQL 쿼리에 직접 연결됩니다. if !empty$REQUEST'status' $status =...

4.9CVSS6.3AI score0.00412EPSS

SaveExploits0

attackerkb•added 2026/06/24 5:33 a.m.•14 views

CVE-2026-8705

The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the pagsegurometodo POST parameter of the clearsaletotalpush AJAX action in all versions up to, and including, 3.4.2. The handler is registered for unauthenticated users wpajaxnoprivclearsaletotalpush, and although a...

7.5CVSS5.9AI score0.00678EPSS

SaveExploits0References7Affected Software1

Vulnrichment•added 2026/06/24 5:33 a.m.•15 views

CVE-2026-8705 ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection

7.5CVSS5.9AI score0.00678EPSS

SaveExploits0References6

CVE•added 2026/06/24 5:33 a.m.•51 views

CVE-2026-8705

The CVE describes a SQL injection in the ClearSale Total WordPress plugin (versions <= 3.4.2). The vulnerability occurs via the pagseguro[metodo] POST parameter of the clearsale_total_push AJAX action, which is accessible to unauthenticated users (wp_ajax_nopriv_clearsale_total_push). Although...

7.5CVSS5.9AI score0.00678EPSS

SaveExploits0References6

Cvelist•added 2026/06/24 5:33 a.m.•61 views

CVE-2026-8705 ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection

7.5CVSS0.00678EPSS

SaveExploits0References6

EUVD•added 2026/06/24 5:33 a.m.•27 views

EUVD-2026-38672

7.5CVSS5.9AI score0.00678EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2026/06/24 12:00 a.m.•4 views

CVE-2026-8705: Improper Neutralization of Special Elements used in an SQL Command

7.5CVSS5.9AI score0.00678EPSS

SaveExploits0References2

RedhatCVE•added 2025/12/10 3:13 p.m.•12 views

CVE-2025-62151

Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virtuaria PagBank / PagSeguro para Woocommerce: from n/a through = 3.6.3...

5.3CVSS7AI score0.00334EPSS

SaveExploits0References1

EUVD•added 2025/12/09 6:30 p.m.•13 views

EUVD-2025-202030

6.5AI score0.00334EPSS

SaveExploits0References2

NVD•added 2025/12/09 4:18 p.m.•16 views

CVE-2025-62151

5.3CVSS0.00334EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 2:52 p.m.•37 views

CVE-2025-62151 WordPress Virtuaria PagBank / PagSeguro para Woocommerce plugin <= 3.6.3 - Broken Access Control vulnerability

5.3CVSS0.00334EPSS

SaveExploits0References1

CVE•added 2025/12/09 2:52 p.m.•24 views

CVE-2025-62151

8.8CVSS6AI score0.00334EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 2:52 p.m.•4 views

CVE-2025-62151 WordPress Virtuaria PagBank / PagSeguro para Woocommerce plugin <= 3.6.3 - Broken Access Control vulnerability

6AI score0.00334EPSS

SaveExploits0References1

CNNVD•added 2025/12/09 12:00 a.m.•15 views

WordPress plugin Virtuaria PagBank / PagSeguro para Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00334EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/12/09 12:00 a.m.•5 views

CVE-2025-62151: Missing Authorization

8.8CVSS5.9AI score0.00334EPSS

SaveExploits0References1

Positive Technologies•added 2025/12/09 12:00 a.m.•15 views

PT-2025-49999

7AI score0.00334EPSS

SaveExploits0References2

Patchstack•added 2025/11/28 5:40 a.m.•13 views

WordPress Virtuaria PagBank / PagSeguro para Woocommerce plugin <= 3.6.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Virtuaria PagBank / PagSeguro para Woocommerce versions = 3.6.3...

8.8CVSS7AI score0.00334EPSS

SaveExploits0Affected Software1

EUVD•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-45644

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.0039EPSS

SaveExploits0References1

RedhatCVE•added 2025/09/12 7:11 a.m.•16 views

CVE-2025-10142

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS6.6AI score0.00412EPSS

SaveExploits0References1

NVD•added 2025/09/10 7:15 a.m.•15 views

CVE-2025-10142

4.9CVSS0.00412EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by