Lucene search
+L

1181 matches found

Patchstack
Patchstack
added 2025/02/14 2:28 p.m.8 views

WordPress Distance Based Shipping Calculator plugin <= 2.0.22 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.22...

6.5CVSS7AI score0.00321EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/02/14 2:27 p.m.8 views

WordPress Distance Based Shipping Calculator plugin <= 2.0.22 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.22...

5.4CVSS7AI score0.0026EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.7 views

WordPress plugin ShipEngine Shipping Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.5CVSS8.7AI score0.00434EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/02/11 10:48 p.m.5 views

WordPress ShipEngine Shipping Quotes plugin <= 1.0.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin ShipEngine Shipping Quotes versions = 1.0.7...

7.5CVSS8.1AI score0.00434EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/07 6:01 p.m.11 views

CVE-2025-22694

Missing Authorization vulnerability in Dotstore Hide Shipping Method For WooCommerce hide-shipping-method-for-woocommerce.This issue affects Hide Shipping Method For WooCommerce: from n/a through = 1.5.1...

4.3CVSS7.2AI score0.00336EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 3:21 a.m.9 views

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

8.5CVSS6.9AI score0.01591EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:31 a.m.9 views

CVE-2025-24685

Path Traversal: '.../...//' vulnerability in Ihor Kit Morkva UA Shipping morkva-ua-shipping allows PHP Local File Inclusion.This issue affects Morkva UA Shipping: from n/a through = 1.0.18...

8.1CVSS7.2AI score0.00663EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:30 a.m.8 views

CVE-2025-24612

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ihor Kit Shipping for Nova Poshta nova-poshta-ttn allows SQL Injection.This issue affects Shipping for Nova Poshta: from n/a through = 1.19.6...

9.3CVSS5.9AI score0.00374EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:17 p.m.7 views

CVE-2024-52495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

8.5CVSS7.3AI score0.00408EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:37 a.m.10 views

CVE-2024-12066

The SMSA Shippingofficial plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsadeletelabel function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, t...

8.8CVSS7.9AI score0.00886EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:21 a.m.9 views

CVE-2024-56301

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Reflected XSS.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.21...

7.1CVSS7.2AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:54 a.m.13 views

CVE-2024-29805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShopUp Shipping with Venipak for WooCommerce allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through 1.19.5...

7.1CVSS8.6AI score0.00372EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:06 a.m.12 views

CVE-2024-49626

Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through = 1.2...

9.8CVSS5.9AI score0.00524EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:44 a.m.9 views

CVE-2024-49249

Path Traversal: '.../...//' vulnerability in SMSA Express SMSA Shipping smsa-shipping-official allows Path Traversal.This issue affects SMSA Shipping: from n/a through = 2.3...

8.6CVSS5.9AI score0.00525EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/03 8:24 p.m.9 views

WordPress Distance Rate Shipping for WooCommerce plugin <= 1.3.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jingle Bells in WordPress Plugin Distance Rate Shipping for WooCommerce versions = 1.3.4...

8.5CVSS8.1AI score0.00359EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/02/03 3:15 p.m.14 views

CVE-2025-22694

Missing Authorization vulnerability in Dotstore Hide Shipping Method For WooCommerce hide-shipping-method-for-woocommerce.This issue affects Hide Shipping Method For WooCommerce: from n/a through = 1.5.1...

4.3CVSS0.00336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/03 2:23 p.m.19 views

CVE-2025-22694 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in theDotstore Hide Shipping Method For WooCommerce. This issue affects Hide Shipping Method For WooCommerce: from n/a through 1.5.0...

4.3CVSS6.9AI score0.00336EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/03 12:00 a.m.11 views

WordPress plugin Hide Shipping Method For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS8.7AI score0.00336EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/31 2:56 p.m.9 views

WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Hide Shipping Method For WooCommerce versions = 1.5.1...

4.3CVSS7AI score0.00336EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/27 2:15 p.m.14 views

CVE-2025-24612

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ihor Kit Shipping for Nova Poshta nova-poshta-ttn allows SQL Injection.This issue affects Shipping for Nova Poshta: from n/a through = 1.19.6...

9.3CVSS0.00374EPSS
SaveExploits0References1
Rows per page
Query Builder