Lucene search
+L

677 matches found

NVD
NVD
added 2024/01/08 6:15 p.m.24 views

CVE-2023-52218

Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8...

10CVSS9.6AI score0.00645EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/08 6:15 p.m.7 views

CVE-2023-52218

Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8...

9.8CVSS7.3AI score0.00645EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/08 6:15 p.m.24 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8...

7.5CVSS7.2AI score0.00645EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 5:34 p.m.21 views

CVE-2023-52218 WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8...

10CVSS6.9AI score0.00645EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/08 5:34 p.m.32 views

CVE-2023-52218 WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8...

10CVSS9.7AI score0.00645EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/08 5:34 p.m.60 views

CVE-2023-52218

CVE-2023-52218 concerns the WordPress plugin WooCommerce Tranzila Gateway (versions

10CVSS8.6AI score0.00645EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.10 views

PT-2024-14482 · Unknown · Woocommerce Tranzila Payment Gateway

Name of the Vulnerable Software and Affected Versions: WooCommerce Tranzila Payment Gateway versions 1.0.8 and earlier Description: The issue is related to the deserialization of untrusted data in the Anton Bond WooCommerce Tranzila Payment Gateway. Recommendations: For versions 1.0.8 and earlier...

10CVSS9.3AI score0.00645EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.9 views

WordPress Plugin Woocommerce Tranzila Payment Gateway Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Woocommerce Tranzila Payme...

10CVSS6.8AI score0.00645EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/05 8:15 a.m.20 views

CVE-2023-51502

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.1...

9.8CVSS8.1AI score0.00599EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/05 8:15 a.m.29 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.1...

7.5CVSS7.2AI score0.00599EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/05 7:56 a.m.19 views

CVE-2023-51502 WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.1...

7.5CVSS6.9AI score0.00599EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/05 7:56 a.m.71 views

CVE-2023-51502

CVE-2023-51502 (WooCommerce Stripe Payment Gateway) enables Authorization Bypass Through User-Controlled Key via update_payment_intent_ajax, affecting WooCommerce Stripe Gateway up to version 7.6.1. The Wordfence entry confirms the vulnerability and notes patched status after remediation.

9.8CVSS8.6AI score0.00599EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/05 7:56 a.m.37 views

CVE-2023-51502 WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.1...

7.5CVSS9.7AI score0.00599EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2024/01/04 12:0 a.m.21 views

WooCommerce Stripe Payment Gateway < 7.6.2 - Unauthenticated Order Deletion via IDOR

Description The plugin doe snot properly check for ownership of completed/pending orders, allowing unauthenticated users to put such order in the trash and delete them...

9.8CVSS7.2AI score0.00599EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/01/01 3:15 p.m.27 views

CVE-2023-6064

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...

7.5CVSS7.4AI score0.0072EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/01/01 2:18 p.m.4 views

CVE-2023-6064 PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...

6.7AI score0.0072EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/01/01 2:18 p.m.28 views

CVE-2023-6064 PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...

7.6AI score0.0072EPSS
SaveExploits2References1
CVE
CVE
added 2024/01/01 2:18 p.m.56 views

CVE-2023-6064

The PayHere Payment Gateway WordPress plugin contains an unauthenticated information-disclosure vulnerability in versions prior to 2.2.12. The root cause is the automatic creation of publicly accessible log files containing sensitive transaction data, leading to potential exposure of confidential...

7.5CVSS7.3AI score0.0072EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.7 views

PT-2024-14870 · WordPress · Payhere Payment Gateway

Name of the Vulnerable Software and Affected Versions: PayHere Payment Gateway WordPress plugin versions prior to 2.2.12 Description: The issue arises from the automatic creation of publicly-accessible log files containing sensitive information when transactions occur. This affects the PayHere...

7.5CVSS7.4AI score0.0072EPSS
SaveExploits2References10
Patchstack
Patchstack
added 2023/12/27 12:0 a.m.15 views

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

Software WooCommerce Stripe Payment Gateway Type Plugin Vulnerable versions = 7.6.1 Fixed in 7.6.2 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-51502 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID fccb1cf37427...

9.8CVSS6.5AI score0.00599EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder