Lucene search
+L

2405 matches found

Kitploit
Kitploit
•added 2026/11/15 7:11 p.m.•28 views

TERM1B1TB0T

TERMI₿IT₿OT 🤖 A basic tool that tracks Bitcoin transactions in real time above or below a particular price target using a websocket API on your terminal. STEP-BY-STEP: WINDOWS -Step 1: Install Python if not already installed Download from python.org During install → make sure to check ✅ “Add Pyth...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/15 9:48 a.m.•25 views

CVE-2025-48129

🚨 CVE-2025-48129 - Privilege Escalation in WordPress Spreadsheet Price Changer Plugin 🛡️ Vulnerability Summary Plugin Affected : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Vulnerable Versions : Classified under: OWASP A7 – Identification and Authentication Failures 🧪...

9.8CVSS6.2AI score0.00578EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/11/14 1:23 p.m.•30 views

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "npss" parameter at rooms.php Description : A SQL Injection vulnerability exists in version 1 of the Hotel Booking Management. A malicious attacker can issue SQL commands to the MySQL database when editing the price...

7.5CVSS6.1AI score0.0068EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/11/14 9:22 a.m.•28 views

CVE-2025-22510

CVE-2025-22510 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WC Price History for Omnibus Vulnerable version To activate this plugin, the WooCommerce plugin must first be installed and activated. 2. To test the PHP Object Inj...

7.2CVSS8.1AI score0.0126EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/11/14 1:56 a.m.•42 views

CVE-2024-50944

CVE-2024-50944 Description SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters. Detection Method An attacker can detect this vulnerability by adding a product to the cart wit...

9.8CVSS5.8AI score0.0103EPSS
SaveExploits0References2
NVD
NVD
•added 2026/11/13 3:17 p.m.•9 views

CVE-2026-119517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.This issue affects Catna – Woo Name Your Price and Offers: from n/a through 2.0.3...

7.1CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/13 3:08 p.m.•14 views

CVE-2026-119517

The VillaTheme Catna – Woo Name Your Price and Offers WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 2.0.3 . Exploitation details and specific remediation steps...

7.1CVSS6AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/13 3:08 p.m.•28 views

CVE-2026-119517 WordPress Catna – Woo Name Your Price and Offers plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.This issue affects Catna – Woo Name Your Price and Offers: from n/a through 2.0.3...

7.1CVSS0.00228EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/13 3:08 p.m.•8 views

EUVD-2026-125430

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.This issue affects Catna – Woo Name Your Price and Offers: from n/a through 2.0.3...

7.1CVSS6AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/13 9:33 a.m.•30 views

CVE-2026-128042 OpenMage magento-lts before 20.19.0 Race Condition in Coupon Usage Limits

OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping cart price rule usage limits, because MageSalesRuleModelValidator checks coupon limits without locking and the usage counters are later incremented non-atomically. Unauthenticated...

6.3CVSS0.00273EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/11/13 9:33 a.m.•6 views

CVE-2026-128042 OpenMage magento-lts before 20.19.0 Race Condition in Coupon Usage Limits

OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping cart price rule usage limits, because MageSalesRuleModelValidator checks coupon limits without locking and the usage counters are later incremented non-atomically. Unauthenticated...

6.3CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/11/13 12:00 a.m.•10 views

PT-2026-146897

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.This issue affects Catna – Woo Name Your Price and Offers: from n/a through 2.0.3...

7.1CVSS6.1AI score0.00228EPSS
SaveExploits0References2
Mend
Mend
•added 2026/11/11 10:48 p.m.•6 views

CVE-2026-126733

This module enables you to sell licenses such as roles or files using Drupal Commerce. The module doesn't sufficiently validate license order items, which under certain conditions could allow a customer to obtain a license without paying its full price. This vulnerability is mitigated by the fact...

3.1CVSS5.9AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2026/11/11 2:17 p.m.•5 views

WordPress Catna – Woo Name Your Price and Offers plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin Catna – Woo Name Your Price and Offers versions = 2.0.3...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/11/11 8:17 a.m.•11 views

CVE-2026-92408

The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from user input before using it to set the product price, allowing unauthenticated users to purchase bookable services at a price of their choosing, including zero...

5.3CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/11 7:33 a.m.•19 views

CVE-2026-92408

The WPS Bookings for WooCommerce WordPress plugin, in versions prior to 3.13.1 , is vulnerable to unauthenticated price manipulation . The root cause is a failure to validate a price value taken from user input before applying it to a product's price. Consequently, unauthenticated users can purch...

5.3CVSS5.9AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/11 7:33 a.m.•44 views

CVE-2026-92408 WPS Bookings for WooCommerce < 3.13.1 - Unauthenticated Price Manipulation via booking_price

The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from user input before using it to set the product price, allowing unauthenticated users to purchase bookable services at a price of their choosing, including zero...

5.3CVSS0.00255EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/11 7:33 a.m.•14 views

EUVD-2026-123279

The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from user input before using it to set the product price, allowing unauthenticated users to purchase bookable services at a price of their choosing, including zero...

5.3CVSS5.9AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/11 7:33 a.m.•12 views

EUVD-2026-123275

The Advanced Product Fields Product Addons for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the car...

5.3CVSS6AI score0.0031EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/11 12:00 a.m.•9 views

CVE-2026-92408: Unknown WPS Bookings for WooCommerce: The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from user input…

The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from user input before using it to set the product price, allowing unauthenticated users to purchase bookable services at a price of their choosing, including zero...

5.3CVSS6AI score0.00255EPSS
SaveExploits0References2
Rows per page
Query Builder