Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/28 9:17 a.m.6 views

CVE-2025-14971

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated...

5.3CVSS5.9AI score0.00039EPSS
Exploits0References1
NVD
NVD
added 2026/01/27 7:16 a.m.3 views

CVE-2025-14971

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated...

5.3CVSS0.00039EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/27 6:44 a.m.2 views

EUVD-2025-206384

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated...

5.3CVSS5.9AI score0.00039EPSS
Exploits0References3
CVE
CVE
added 2026/01/27 6:44 a.m.13 views

CVE-2025-14971

CVE-2025-14971 applies to the WordPress plugin Link Invoice Payment for WooCommerce (versions up to 2.8.0). The vulnerability is an unauthorized data modification flaw caused by a missing capability check on createPartialPayment and cancelPartialPayment, enabling unauthenticated attackers to crea...

5.3CVSS5.9AI score0.00039EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/27 6:44 a.m.30 views

CVE-2025-14971 Link Invoice Payment for WooCommerce <= 2.8.0 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated...

5.3CVSS0.00039EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/27 6:44 a.m.3 views

CVE-2025-14971 Link Invoice Payment for WooCommerce <= 2.8.0 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated...

5.3CVSS5.9AI score0.00039EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.3 views

PT-2026-4856

The Link Invoice Payment for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createPartialPayment and cancelPartialPayment functions in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated...

5.3CVSS5.9AI score0.00039EPSS
Exploits0References4
Rows per page
Query Builder