Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/15 7:23 a.m.3 views

CVE-2025-14173

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. This is due to missing authorization checks on the logout function called via the actions function hooked to admininit. This makes it possible for unauthenticated...

5.3CVSS6.1AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2026/01/14 7:16 a.m.3 views

CVE-2025-14173

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. This is due to missing authorization checks on the logout function called via the actions function hooked to admininit. This makes it possible for unauthenticated...

5.3CVSS0.00128EPSS
Exploits0References3
CVE
CVE
added 2026/01/14 6:40 a.m.11 views

CVE-2025-14173

CVE-2025-14173 concerns the Perfit WooCommerce plugin for WordPress. The vulnerability is due to missing authorization on the logout function invoked through the actions hook on admin_init, affecting all versions up to and including 1.0.1. This enables unauthenticated attackers to delete arbitrar...

5.3CVSS5.7AI score0.00128EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/14 6:40 a.m.2 views

CVE-2025-14173 Perfit WooCommerce <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. This is due to missing authorization checks on the logout function called via the actions function hooked to admininit. This makes it possible for unauthenticated...

5.3CVSS5.7AI score0.00128EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/14 6:40 a.m.24 views

CVE-2025-14173 Perfit WooCommerce <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. This is due to missing authorization checks on the logout function called via the actions function hooked to admininit. This makes it possible for unauthenticated...

5.3CVSS0.00128EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/14 6:40 a.m.2 views

EUVD-2026-2532

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. This is due to missing authorization checks on the logout function called via the actions function hooked to admininit. This makes it possible for unauthenticated...

5.3CVSS5.6AI score0.00128EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.3 views

WordPress plugin Perfit WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.8AI score0.00128EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.2 views

PT-2026-2834

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. This is due to missing authorization checks on the logout function called via the actions function hooked to admin init. This makes it possible for unauthenticated...

5.3CVSS6.1AI score0.00128EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/01/13 11:5 p.m.4 views

WordPress Perfit WooCommerce plugin <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion vulnerability discovered by Legion Hunter in WordPress Plugin Perfit WooCommerce versions = 1.0.1...

5.3CVSS7AI score0.00128EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder