Lucene search
+L

25049 matches found

OSV
OSV
added 2026/07/11 10:54 a.m.6 views

MINI-H4XH-6GWX-WJ23

Bulletin has no description...

10CVSS6.3AI score0.00503EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 7:45 a.m.8 views

MINI-677Q-JV3V-GQM8

Bulletin has no description...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 7:45 a.m.9 views

MINI-JFFX-3CGX-9R23

Bulletin has no description...

5.3CVSS6.1AI score0.00382EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 7:45 a.m.7 views

MINI-FWFW-742W-467F

Bulletin has no description...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 7:44 a.m.8 views

MINI-VVC8-59M2-679F

Bulletin has no description...

5.3CVSS6.1AI score0.00382EPSS
SaveExploits0
NVD
NVD
added 2026/07/11 7:16 a.m.15 views

CVE-2026-10041

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfmproductarchive due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

4.3CVSS0.00434EPSS
SaveExploits0References12
Cvelist
Cvelist
added 2026/07/11 5:35 a.m.47 views

CVE-2026-10041 WCFM – Frontend Manager for WooCommerce <= 6.7.27 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Vendor Data Manipulation via Multiple AJAX Handlers

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfmproductarchive due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

4.3CVSS0.00434EPSS
SaveExploits0References12
EUVD
EUVD
added 2026/07/11 5:35 a.m.19 views

EUVD-2026-43162

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfmproductarchive due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

4.3CVSS6.2AI score0.00434EPSS
SaveExploits0References12
CVE
CVE
added 2026/07/11 5:35 a.m.91 views

CVE-2026-10041

The CVE-2026-10041 entry concerns the WCFM – Frontend Manager for WooCommerce WordPress plugin (versions

4.3CVSS6.2AI score0.00434EPSS
SaveExploits0References12
NVD
NVD
added 2026/07/11 5:16 a.m.15 views

CVE-2026-13116

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00387EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/11 3:44 a.m.39 views

CVE-2026-13116 PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00387EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/11 3:44 a.m.24 views

EUVD-2026-43138

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS6.1AI score0.00387EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/11 3:44 a.m.29 views

CVE-2026-13116

CVE-2026-13116 affects the PDF Invoices & Packing Slips for WooCommerce plugin (WordPress) ≤ 5.14.0. Issue: Insecure Direct Object Reference via generate_document_shortcode caused by missing validation on a user-controlled key. Consequence: authenticated attackers with contributor+ access can min...

4.3CVSS6.1AI score0.00387EPSS
SaveExploits0References8
Circl
Circl
added 2026/07/11 2:54 a.m.15 views

CVE-2026-49394

creationtimestamp| type| source ---|---|--- 2026-07-11 02:54:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdnxgp6ki2c...

7.1CVSS6.1AI score0.0054EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/11 1:27 a.m.7 views

MINI-77VF-47WV-8C8G

Bulletin has no description...

5.3CVSS6.1AI score0.00382EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 1:27 a.m.8 views

MINI-52V4-QC9M-H4X3

Bulletin has no description...

5.3CVSS6.1AI score0.00382EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 1:27 a.m.8 views

MINI-5J6F-MH3H-F2GM

Bulletin has no description...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 1:26 a.m.8 views

MINI-R552-H7WG-QC3Q

Bulletin has no description...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 1:26 a.m.10 views

MINI-M83P-62FH-MJ9G

Bulletin has no description...

5.3CVSS6.1AI score0.00382EPSS
SaveExploits0
OSV
OSV
added 2026/07/11 1:26 a.m.9 views

MINI-87RC-V2PX-GQX2

Bulletin has no description...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
Rows per page
Query Builder