10 matches found
CVE-2026-11351
The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...
CVE-2026-11351
The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...
CVE-2026-11351
The CVE-2026-11351 entry concerns the ShinyStat Analytics WordPress plugin (before version 1.0.17). The vulnerability is an missing authorization check on a REST API endpoint, allowing unauthenticated access to information about non-published WooCommerce products (e.g., drafts, pending, or privat...
EUVD-2026-50113
The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...
CVE-2026-11351 ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure
The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...
s2.shinystat.it XSS vulnerability
Open Bug Bounty ID: OBB-418546 Description| Value ---|--- Affected Website:| s2.shinystat.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
s5.shinystat.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-363687 Description| Value ---|--- Affected Website:| s5.shinystat.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...
s6.shinystat.com Open Redirect vulnerability
Vulnerable URL: http://s6.shinystat.com/cgi-bin/redir.cgi?URL=http://openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...
shinystat.com Open Redirect vulnerability
Vulnerable URL: http://shinystat.com/cgi-bin/redir.cgi?URL=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 30548 VIP website status:| Yes Che...
s6.shinystat.com Open Redirect vulnerability
Vulnerable URL: http://s6.shinystat.com/cgi-bin/redir.cgi?URL=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...