Lucene search
+L

72 matches found

Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.14 views

PT-2025-14069 · WordPress · Wp Wham Sku Generator For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Wham SKU Generator for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...

7.1CVSS9AI score0.00306EPSS
SaveExploits0References5
Veeam
Veeam
added 2025/03/31 12:00 a.m.31 views

Support Statement - Microsoft's Retirement of Basic SKU Public IP Addresses

Challenge Due to Microsoft's deprecation of Basic SKU Public IP addresses, starting on March 31st, 2025, the following product features that utilize the Basic SKU Public IP address will be impacted: Veeam Backup & Replication The Archiver Appliance used by an Object Storage Repository for Microso...

7AI score
SaveExploits0Affected Software2
Patchstack
Patchstack
added 2025/03/27 12:22 p.m.13 views

WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) Vulnerability

Reflected Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin SKU Generator for WooCommerce versions = 1.6.2...

7.1CVSS6.2AI score0.00306EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/01 5:15 a.m.13 views

CVE-2024-9212

The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00335EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/01 4:21 a.m.21 views

CVE-2024-9212 SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting

The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00335EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/01 4:21 a.m.6 views

CVE-2024-9212 SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting

The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.1AI score0.00335EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/01 12:00 a.m.9 views

WordPress plugin SKU Generator for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.1CVSS7.5AI score0.00335EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/03/01 12:00 a.m.14 views

PT-2025-9150 · WordPress · Sku Generator For Woocommerce

Name of the Vulnerable Software and Affected Versions: SKU Generator for WooCommerce plugin for WordPress versions up to, and including, 1.6.2 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg without proper escaping on the URL. This...

6.1CVSS8.6AI score0.00335EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/02/05 3:13 a.m.9 views

CVE-2024-51693

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/19 12:00 a.m.10 views

Govee Home 安全漏洞

Govee Home is an application from Govee, Inc. A security vulnerability exists in Govee Home that stems from an Authorization Error vulnerability in the HTTP POST method in the application, which allows remote attackers to take control of devices owned by other users by changing the values of the...

10CVSS6.9AI score0.00582EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/11/09 12:46 p.m.26 views

CVE-2024-51693 WordPress Search order by product SKU for WooCommerce plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...

7.1CVSS0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/09 12:00 a.m.8 views

WordPress plugin Search order by product SKU for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS7.6AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/14 12:15 a.m.39 views

CVE-2023-29174

Missing Authorization vulnerability in NervyThemes SKU Label Changer For WooCommerce.This issue affects SKU Label Changer For WooCommerce: from n/a through 3.0...

6.5CVSS0.00394EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/13 12:00 a.m.12 views

WordPress plugin SKU Label Changer For WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.8AI score0.00394EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 9:13 p.m.7 views

Malicious code in shared-sku-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f4a6b7a58b7e3a22b0288f7a57ed4d8e3b0c3036d80bb06af284a062ec19925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 9:13 p.m.10 views

MAL-2022-6080 Malicious code in shared-sku-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f4a6b7a58b7e3a22b0288f7a57ed4d8e3b0c3036d80bb06af284a062ec19925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:09 p.m.6 views

Malicious code in sc-hydrate-sku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:09 p.m.10 views

MAL-2022-5951 Malicious code in sc-hydrate-sku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Huntr
Huntr
added 2022/03/14 9:31 p.m.20 views

The microweber application allows large characters to insert in the input field "SKU" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber

Go to add post http://site.com/admin/product/create click on create new product There will a option called SKU Fill the input field with huge characters, more than 1 lakh Copy the below payload and put it in the input fields and click on continue. You will see the application accepts large...

2.2AI score0.03503EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/26 12:00 a.m.35 views

Fedora 31 : fwupd (2020-ad1c74c2a1)

New upstream release - Actually reload the DFU device after upgrade has completed - Capture the dock SKU in report metadata - Correctly set the Logitech device protocol - Do not use shim for non-secure boot configurations - Ensure that the DeviceID is set for child devices - Fix an error when...

6CVSS5.9AI score0.0049EPSS
SaveExploits1References2
Rows per page
Query Builder