TERM1B1TB0T

TERMI₿IT₿OT 🤖 Una herramienta básica que rastrea transacciones de Bitcoin en tiempo real por encima o por debajo de un objetivo de precio particular usando una API websocket en tu terminal. PASO A PASO: WINDOWS -Paso 1: Instalar Python si no está instalado aún Download from python.org Durante la...

CVE-2024-50944

CVE-2024-50944 Descripción SimplCommerce se ve afectado por una vulnerabilidad de desbordamiento de enteros en la lógica del carrito, lo que permite manipular las cantidades de productos y los precios totales mediante parámetros de cantidad manipulados. Método de detección Un atacante puede...

CVE-2026-87892

The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a booking, allowing unauthenticated attackers to create confirmed bookings at an arbitrary price and to bypass the site's...

EUVD-2026-76803

The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a booking, allowing unauthenticated attackers to create confirmed bookings at an arbitrary price and to bypass the site's...

CVE-2026-87892 Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass

The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a booking, allowing unauthenticated attackers to create confirmed bookings at an arbitrary price and to bypass the site's...

CVE-2026-87892

The Rox Appointment Booking WordPress plugin (versions before 1.2.0 ) fails to verify the order total or selected payment method against its own server-side pricing when creating a booking. This allows unauthenticated attackers to create confirmed bookings at an arbitrary price and bypass the sit...

CVE-2026-62136

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

EUVD-2026-76201

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

CVE-2025-22510

CVE-2025-22510 1️⃣ Tipo de componente Plugin de WordPress 2️⃣ Detalles del componente Nombre del componente WC Price History for Omnibus Versión vulnerable = 2.1.4 Slug del componente wc-price-history Enlace del componente https://wordpress.org/plugins/wc-price-history/ 3️⃣ OWASP 2017: TOP 10 Clase...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - Vulnerabilidad de inyección SQL en el parámetro "npss" en rooms.php Descripción : Existe una vulnerabilidad de inyección SQL en la versión 1 de Hotel Booking Management. Un atacante malicioso puede ejecutar comandos SQL en la base de datos MySQL al...

CVE-2025-48129

🚨 CVE-2025-48129 - Escalada de Privilegios en el Plugin Spreadsheet Price Changer de WordPress 🛡️ Resumen de la Vulnerabilidad Plugin Afectado : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Versiones Vulnerables : Clasificado bajo: OWASP A7 – Fallas de Identificación y...

CVE-2026-85037

The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that...

CVE-2026-84908

The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnlloadpayment' AJAX action for both authenticated and unauthenticated wpajaxnopriv users and the underlying addofferproducttocart...

EUVD-2026-74717

The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that...

WordPress Sunshine Photo Cart plugin < 3.7 - Unauthenticated Price Manipulation vulnerability

Unauthenticated Price Manipulation vulnerability discovered by Farid Narimanov in WordPress Plugin Sunshine Photo Cart versions 3.7...

CVE-2026-85037 Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR

The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that...

CVE-2026-85037

The Sunshine Photo Cart WordPress plugin, prior to version 3.7 , fails to validate that a client-supplied price identifier belongs to the item being purchased when added to the cart. This Insecure Direct Object Reference (IDOR) flaw allows unauthenticated users to associate a lower price defined ...

EUVD-2026-74687

The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnlloadpayment' AJAX action for both authenticated and unauthenticated wpajaxnopriv users and the underlying addofferproducttocart...

CVE-2026-84908

The WPFunnels WordPress plugin (versions ≤ 3.12.13 ) is vulnerable to Missing Authorization in its wpfnl_load_payment AJAX action, which is registered for both authenticated and unauthenticated users. The underlying add_offer_product_to_cart() function performs no nonce verification, no capabilit...

CVE-2026-84908 WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action

The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnlloadpayment' AJAX action for both authenticated and unauthenticated wpajaxnopriv users and the underlying addofferproducttocart...