72 matches found
PT-2025-14069 · WordPress · Wp Wham Sku Generator For Woocommerce
Name of the Vulnerable Software and Affected Versions: WP Wham SKU Generator for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables...
Support Statement - Microsoft's Retirement of Basic SKU Public IP Addresses
Challenge Due to Microsoft's deprecation of Basic SKU Public IP addresses, starting on March 31st, 2025, the following product features that utilize the Basic SKU Public IP address will be impacted: Veeam Backup & Replication The Archiver Appliance used by an Object Storage Repository for Microso...
WordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) Vulnerability
Reflected Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin SKU Generator for WooCommerce versions = 1.6.2...
CVE-2024-9212
The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-9212 SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-9212 SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting
The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to inject arbitrary web...
WordPress plugin SKU Generator for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
PT-2025-9150 · WordPress · Sku Generator For Woocommerce
Name of the Vulnerable Software and Affected Versions: SKU Generator for WooCommerce plugin for WordPress versions up to, and including, 1.6.2 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg without proper escaping on the URL. This...
CVE-2024-51693
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...
Govee Home 安全漏洞
Govee Home is an application from Govee, Inc. A security vulnerability exists in Govee Home that stems from an Authorization Error vulnerability in the HTTP POST method in the application, which allows remote attackers to take control of devices owned by other users by changing the values of the...
CVE-2024-51693 WordPress Search order by product SKU for WooCommerce plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...
WordPress plugin Search order by product SKU for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
CVE-2023-29174
Missing Authorization vulnerability in NervyThemes SKU Label Changer For WooCommerce.This issue affects SKU Label Changer For WooCommerce: from n/a through 3.0...
WordPress plugin SKU Label Changer For WooCommerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
Malicious code in shared-sku-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f4a6b7a58b7e3a22b0288f7a57ed4d8e3b0c3036d80bb06af284a062ec19925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6080 Malicious code in shared-sku-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f4a6b7a58b7e3a22b0288f7a57ed4d8e3b0c3036d80bb06af284a062ec19925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sc-hydrate-sku (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5951 Malicious code in sc-hydrate-sku (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The microweber application allows large characters to insert in the input field "SKU" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber
Go to add post http://site.com/admin/product/create click on create new product There will a option called SKU Fill the input field with huge characters, more than 1 lakh Copy the below payload and put it in the input fields and click on continue. You will see the application accepts large...
Fedora 31 : fwupd (2020-ad1c74c2a1)
New upstream release - Actually reload the DFU device after upgrade has completed - Capture the dock SKU in report metadata - Correctly set the Logitech device protocol - Do not use shim for non-secure boot configurations - Ensure that the DeviceID is set for child devices - Fix an error when...