Lucene search
+L

289 matches found

Kitploit
Kitploit
added 2026/08/28 10:38 a.m.2 views

CVE-2024-46532

Numero CVE: CVE-2024-46532 fornitore: 上海顶想信息科技有限公司https://www.kancloud.cn/ prodotto: 互联网医疗系统医疗门诊OpenHIS versione: V1.0 componente interessata: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Riproduzione delle vulnerabilità di SQL Injection in OpenHIS Vulnerabilità:...

9.8CVSS5.8AI score0.00968EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 6:00 a.m.2 views

EUVD-2026-67571

The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site...

5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/08/28 6:00 a.m.5 views

CVE-2026-77701

WCFM Marketplace WordPress plugin versions before 3.8.2 contain an authorization flaw: the plugin does not correctly verify that the user requesting a refund actually owns the order. This allows unauthenticated users to create refund requests against any guest checkout order on the site. The prac...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 9:32 p.m.3 views

CVE-2022-4047

CVE-2022-4047 Return Refund and Exchange For WooCommerce 4.0.9 - Caricamento Arbitrario di File Non Autenticato Utilizzo root@kitploit: @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@ @@@@@@@@@@...

9.8CVSS8.7AI score0.06152EPSS
SaveExploits3
NVD
NVD
added 2026/08/26 6:16 a.m.4 views

CVE-2026-77695

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.6.4 does not correctly verify the ownership of guest orders in some of the AJAX actions it exposes to unauthenticated users, allowing them to read private order messages, post messages and attachments in the customer's name,...

6.5CVSS0.00216EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 6:00 a.m.5 views

EUVD-2026-66285

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.6.4 does not correctly verify the ownership of guest orders in some of the AJAX actions it exposes to unauthenticated users, allowing them to read private order messages, post messages and attachments in the customer's name,...

6.5CVSS5.5AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 6:00 a.m.11 views

CVE-2026-77695

CVE-2026-77695 affects the Return Refund and Exchange For WooCommerce WordPress plugin in versions prior to 4.6.4 . The root cause is that certain AJAX actions exposed to unauthenticated users do not correctly verify the ownership of guest orders . An unauthenticated attacker can exploit this to ...

6.5CVSS5.3AI score0.00216EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 8:26 a.m.2 views

WooRefer

WooRefer | CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce Strumento automatico di massa per verificare e sfruttare la vulnerabilità in CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh...

9.8CVSS8.6AI score0.06152EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2026/08/09 6:00 a.m.10 views

CVE-2026-18603

The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not have authorization or ownership checks when adding the contents of a previous order to the cart, allowing unauthenticated users to disclose the contents of other customers' orders, as well as to clea...

5.3AI score0.00242EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/01 7:16 a.m.14 views

CVE-2026-13329

The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds, allowing any authenticated user, including Subscribers, to trigger refunds against captured orders...

6.5CVSS0.00174EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/01 6:00 a.m.12 views

EUVD-2026-51699

The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds, allowing any authenticated user, including Subscribers, to trigger refunds against captured orders...

5.5AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/01 6:00 a.m.42 views

CVE-2026-13329 WC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order Refund

The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds, allowing any authenticated user, including Subscribers, to trigger refunds against captured orders...

0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/13 10:16 a.m.11 views

CVE-2026-57402

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdesk Flexible Refund and Return Order for WooCommerce flexible-refund-and-return-order-for-woocommerce allows Stored XSS.This issue affects Flexible Refund and Return Order for WooCommerce: from...

6.5CVSS0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/13 8:41 a.m.35 views

CVE-2026-57402 WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdesk Flexible Refund and Return Order for WooCommerce flexible-refund-and-return-order-for-woocommerce allows Stored XSS.This issue affects Flexible Refund and Return Order for WooCommerce: from...

6.5CVSS0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/13 8:41 a.m.18 views

CVE-2026-57402

CVE-2026-57402 concerns the WordPress plugin Flexible Refund and Return Order for WooCommerce (versions

6.5CVSS6.1AI score0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/07/08 12:20 p.m.11 views

WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Flexible Refund and Return Order for WooCommerce versions = 1.0.51...

6.5CVSS6.1AI score0.00224EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/06 12:00 a.m.21 views

PT-2026-56032

Name of the Vulnerable Software and Affected Versions FOSSBilling versions prior to 0.8.0 Description The PayPalEmail payment adapter fails to validate the amount supplied via PayPal IPN Instant Payment Notification callbacks, specifically the mc gross variable, against the actual invoice total...

2.3CVSS5.9AI score0.00424EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:50 p.m.16 views

CVE-2026-7862

The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant's payment gateway credentials, and for applicable payment...

8.6CVSS5.5AI score0.00215EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/28 6:00 a.m.11 views

CVE-2026-7862

The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant's payment gateway credentials, and for applicable payment...

5.8AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/28 6:00 a.m.44 views

CVE-2026-7862

The CVE-2026-7862 entry concerns the Eupago Gateway For Woocommerce WordPress plugin (pre-4.7.2). The vulnerability allows unauthenticated attackers to initiate refunds against any WooCommerce order via the merchant’s payment gateway credentials, and for applicable payment methods, redirect refun...

8.6CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder