Lucene search
+L

19 matches found

Cvelist
Cvelist
•added 2026/01/28 8:26 a.m.•48 views

CVE-2026-0702 VidShop – Shoppable Videos for WooCommerce <= 1.1.4 - Unauthenticated Time-Based SQL Injection via 'fields'

The VidShop – Shoppable Videos for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

7.5CVSS0.01541EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•1 views

CVE-2026-0702: Improper Neutralization of Special Elements used in an SQL Command

The VidShop – Shoppable Videos for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

7.5CVSS5.7AI score0.01541EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 4:26 p.m.•27 views

CVE-2025-62080

Cross-Site Request Forgery CSRF vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through = 2.2.0...

4.3CVSS5.9AI score0.00119EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 3:32 p.m.•18 views

CVE-2025-62081

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through =...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:44 p.m.•16 views

EUVD-2025-206032

Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

4.3CVSS6.3AI score0.00119EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 3:44 p.m.•9 views

CVE-2025-62080 WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

4.3CVSS5.8AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 3:44 p.m.•30 views

CVE-2025-62080

CVE-2025-62080 is described as a CSRF vulnerability in Live Shopping & Shoppable Videos For WooCommerce. Connected Wordfence material confirms the affected product family and references related vulnerabilities for the same plugin (Live Shopping & Shoppable Videos For WooCommerce) with Missing Aut...

4.3CVSS5.8AI score0.00119EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 3:31 p.m.•18 views

WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin Live Shopping & Shoppable Videos For WooCommerce versions = 2.2.0...

4.3CVSS6.7AI score0.00119EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/12/31 3:15 p.m.•22 views

CVE-2025-62081

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through =...

5.3CVSS0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:00 p.m.•14 views

EUVD-2025-206045

Missing Authorization vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

5.3CVSS6.5AI score0.00254EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 3:00 p.m.•9 views

CVE-2025-62081 WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through =...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 3:00 p.m.•35 views

CVE-2025-62081

CVE-2025-62081 – Missing Authorization in Live Shopping & Shoppable Videos For WooCommerce. Exploiting Incorrectly Configured Access Control Security Levels may allow unauthorized access to features. Affected software: Live Shopping & Shoppable Videos For WooCommerce (up to 2.2.0). Patch status: ...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 3:00 p.m.•40 views

CVE-2025-62081 WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through =...

5.3CVSS0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 2:53 p.m.•21 views

WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin Live Shopping & Shoppable Videos For WooCommerce versions = 2.2.0...

5.3CVSS7AI score0.00254EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•15 views

WordPress plugin Live Shopping & Shoppable Videos For WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00119EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•6 views

CVE-2025-62081: Missing Authorization

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through =...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•14 views

PT-2025-54343

Name of the Vulnerable Software and Affected Versions Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce versions through 2.2.0 Description A missing authorization issue exists in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce, allowing exploitation of...

5.3CVSS6.5AI score0.00254EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•16 views

WordPress plugin Live Shopping & Shoppable Videos For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•3 views

CVE-2025-62080: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through = 2.2.0...

4.3CVSS5.8AI score0.00119EPSS
SaveExploits0References1
Rows per page
Query Builder