CVE-2023-40559

CVE-2023-40559 is a CSRF vulnerability in the TheDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin for WordPress (WooCommerce). Affected versions are

WooCommerce Dynamic Pricing and Discount Rules < 2.4.1 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Plugin Dynamic Pricing and Discount Rules for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. The WordPress Plugin Dynamic Pricing and Discount Rules...

PT-2023-27511 · Woocommerce · Thedotstore Dynamic Pricing/Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin versions = 2.4.0 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their...

WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Broken Access Control

Software WRC Pricing Tables Type Plugin Vulnerable versions = 2.3.7 Fixed in 2.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32293 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID eca354e9c6c2 Credits Abdi Pranata Required...

CVE-2023-38517

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Realwebcare WRC Pricing Tables plugin = 2.3.7 versions...

CVE-2023-38517

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Realwebcare WRC Pricing Tables plugin = 2.3.7 versions...

CVE-2023-38517 WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Realwebcare WRC Pricing Tables plugin = 2.3.7 versions...

CVE-2023-38517

CVE-2023-38517: Stored XSS in Realwebcare WRC Pricing Tables plugin prior to 2.3.8 (

CVE-2023-38517 WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Realwebcare WRC Pricing Tables plugin = 2.3.7 versions...

WordPress plugin WRC Pricing Tables Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-26494 · Realwebcare · Realwebcare Wrc Pricing Tables

Name of the Vulnerable Software and Affected Versions: Realwebcare WRC Pricing Tables plugin versions prior to 2.3.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Realwebcare WRC Pricing Tables plugin. This vulnerability requires...

LinkedIn: Attackers can *Upgrade and claim offer* on the Premium Trial Subscription with a total price of *IDR0.00* from the original *IDR7,022,061.82*

The reporter found a method to tamper with the premium pricing flow, allowing an attacker to subscribe to the LinkedIn Sales Navigator Core offering for free. This issue has been fixed and resolved...

WordPress Pricing Deals for WooCommerce Plugin <= 2.0.3.2 is vulnerable to Broken Access Control

Software Pricing Deals for WooCommerce Type Plugin Vulnerable versions = 2.0.3.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41240 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c8f9727d59aa Credits thiennv Require...

WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Dynamic Pricing and Discount Rules Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40559 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

Re-org attack in factory LiquidationPairFactory.sol

Lines of code Vulnerability details Impact Allowing creation of new LiquidationPairs by Re-org attack may adversely affect pricing in LiquidationPair.sol contracts. Proof of Concept The LiquidationPairFactory.solcreatePair function deploys a new LiquidationPair using the create, where the address...

CurveStableMetapoolCollateral.tryPrice returns a huge but valid high price when the price oracle of pairedToken is timeout

Lines of code Vulnerability details The CurveStableMetapoolCollateral is intended for 2-fiattoken stable metapools. The metapoolToken coin0 is pairedToken and the coin1 is lpToken, e.g. 3CRV. And the config.chainlinkFeed should be set for paired token. Impact The CurveStableMetapoolCollateral.pri...

CVE-2022-4888

The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2,...

PT-2023-15899 · WordPress · Checkout Fields Manager +12

Name of the Vulnerable Software and Affected Versions: Checkout Fields Manager WordPress plugin versions prior to 1.0.2 Abandoned Cart Recovery WordPress plugin versions prior to 1.2.5 Custom Fields for WooCommerce WordPress plugin versions prior to 1.0.4 Custom Order Number WordPress plugin...

Missing check of how recent the price is can lead to stale price being used in the protocol

Lines of code Vulnerability details Impact In the ChainlinkOracle.sol file, in the function getChainlinkPriceAggregatorV3Interface feed, there is the check requireupdatedAt != 0, "Round is in incompleted state";. However, there is no check to see that the price is recent and acceptable. If there ...