WordPress Flat Rate Shipping Plugin For WooCommerce plugin <= 4.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Flat Rate Shipping Plugin For WooCommerce plugin versions = 4.0.2. Solution Update the WordPress Flat Rate Shipping Plugin For WooCommerce plugin to the latest available version at least 4.0.3...

WordPress Product Shipping Countdown Free plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Product Shipping Countdown Free plugin versions = 1.0.6. Solution No patched version available...

WordPress Mojito Shipping plugin <= 1.3.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Mojito Shipping plugin versions = 1.3.8. Solution Update the WordPress Mojito Shipping plugin to the latest available version at least 1.3.9...

WordPress Shipping Manager For WooCommerce plugin < 1.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Shipping Manager For WooCommerce plugin versions 1.3.0. Solution Update the WordPress Shipping Manager For WooCommerce plugin to the latest available version at least 1.3.0...

WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin < 2.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin versions 2.0.4. Solution Update the WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin to the latest available version at least 2.0.4...

WordPress Mojito Shipping plugin <= 1.3.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mojito Shipping plugin versions = 1.3.8. Solution Update the WordPress Mojito Shipping plugin to the latest available version at least 1.3.9...

WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin < 2.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin versions 2.0.4. Solution Update the WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin to the latest available version at least 2.0.4...

Cybercriminals Love Supply-Chain Chaos: Here’s How to Protect Your Inbox

Over the last couple of months, the Zix Threat Research team has observed threat actors using new tactics to spoof logistics and supply-chain companies, hoping for an easy compromise. As we have seen throughout the COVID-19 pandemic, cybercriminals are flourishing in these times of upheaval, due ...

Unisys Cargo Mobile Information Disclosure Vulnerability

Unisys Cargo Mobile is a shipping solution from Unisys, Inc. An information disclosure vulnerability exists in the Unisys Cargo Mobile Application prior to 1.2.29. The vulnerability stems from the use of plaintext storage of sensitive information, which could be exploited by an attacker to obtain...

Oracle Shipping Execution Information Disclosure Vulnerability (CNVD-2025-02855)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An information disclosure vulnerability exists in...

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

Design/Logic Flaw

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An information disclosure vulnerability exists in...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

CVE-2021-36454

Cross Site Scripting XSS vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1 backups\backups.php, 2 blocks\blocks.php, 3 brands\brands.php, 4 comments\comments.php, 5 coupons\coupons.php, 6 feeds\feeds.php, 7 functions\functions.php, 8 items\items.php, 9...

Zibo Shining Network Technology Co., Ltd. ships 100cms with SQL injection vulnerability

Shipping 100cms is a virtual goods auto shipping system/article pay to read system, no need to manually manned, customers can buy online to automatically complete the transaction. There is a SQL injection vulnerability in Shipping 100cms by Zibo Shining Network Technology Co. Attackers can use th...