Lucene search
+L

286 matches found

Patchstack
Patchstack
added 2023/07/18 12:00 a.m.12 views

WordPress Premmerce Wholesale Pricing for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce Wholesale Pricing for WooCommerce Type Plugin Vulnerable versions = 1.1.9 Fixed in 1.1.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID 115879d78db1 Credits Rafie...

6.3AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.14 views

WordPress Premmerce WooCommerce Customers Manager Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce WooCommerce Customers Manager Type Plugin Vulnerable versions = 1.1.13 Fixed in 1.1.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID b3dee6c5c8f0 Credits Rafie Muhamm...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.13 views

WordPress Premmerce Wishlist for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce Wishlist for WooCommerce Type Plugin Vulnerable versions = 1.1.9 Fixed in 1.1.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID aafe83c7ae0e Credits Rafie Muhammad...

6.3AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.7 views

WordPress Premmerce Product Search for WooCommerce Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce Product Search for WooCommerce Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID df89cf768ffd Credits Rafie Muhamma...

6.5AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.8 views

WordPress Premmerce User Roles Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce User Roles Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID c24cfcff409e Credits Rafie Muhammad Patchstack...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2023/07/18 12:00 a.m.12 views

Premmerce < 1.3.17 - Cross-Site Request Forgery

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS8.7AI score0.00264EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.14 views

WordPress Premmerce Product Filter for WooCommerce Plugin <= 3.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce Product Filter for WooCommerce Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.7.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Premmerce PSID 0651d3072e8f Credits Rafie Muhamma...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/07/17 11:15 a.m.5 views

CVE-2023-23719

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/17 11:15 a.m.17 views

CVE-2023-23719

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

8.8CVSS0.00264EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/17 11:15 a.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

6.8CVSS8.8AI score0.00264EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/17 10:54 a.m.55 views

CVE-2023-23719

CVE-2023-23719 affects the WordPress Premmerce plugin, with CSRF vulnerabilities in versions up to 1.3.17 (and variants noted up to 1.3.18 in some sources). The underlying issue is CSRF checks missing in specific paths, enabling unauthorized actions by authenticated users who are tricked into req...

8.8CVSS7.1AI score0.00264EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/17 10:54 a.m.28 views

CVE-2023-23719 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

5.4CVSS9AI score0.00264EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/17 10:54 a.m.15 views

CVE-2023-23719 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Premmerce plugin = 1.3.17 versions...

5.4CVSS7.1AI score0.00264EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/17 12:00 a.m.8 views

PT-2023-19157 · WordPress · Premmerce

Name of the Vulnerable Software and Affected Versions: Premmerce plugin versions = 1.3.17 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application tha...

8.8CVSS8.4AI score0.00264EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/17 12:00 a.m.8 views

WordPress Plugin Premmerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.7AI score0.00264EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/10 4:15 p.m.10 views

CVE-2023-23787

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

8.8CVSS7.3AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.19 views

CVE-2023-23787

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

6.8CVSS8.7AI score0.00321EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/10 3:39 p.m.14 views

CVE-2023-23787 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

4.3CVSS7.1AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/10 3:39 p.m.61 views

CVE-2023-23787

CVE-2023-23787 is a Cross-Site Forgery vulnerability in the WordPress plugin Premmerce Redirect Manager , affecting versions

8.8CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder