Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 5:42 a.m.•12 views

CVE-2023-0781

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file removeOrder.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7AI score0.00743EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/13 2:15 a.m.•17 views

CVE-2024-10853

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeorder AJAX action in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS7.3AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•12 views

PT-2024-16592 · WordPress · Buy One Click Woocommerce Plugin

Name of the Vulnerable Software and Affected Versions: Buy one click WooCommerce plugin for WordPress versions up to, and including, 2.2.9 Description: The issue is related to a missing capability check on the removeorder AJAX action, allowing authenticated attackers with Subscriber-level access...

4.3CVSS9.1AI score0.00354EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•11 views

WordPress plugin Buy one click WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

4.3CVSS7.8AI score0.00354EPSS
SaveExploits0References3
OSV
OSV
•added 2023/02/11 1:15 p.m.•14 views

CVE-2023-0781

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file removeOrder.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS6.5AI score0.00743EPSS
SaveExploits1References3
Rows per page
Query Builder