Lucene search
+L

524 matches found

Cvelist
Cvelist
added 2024/12/13 2:22 p.m.27 views

CVE-2022-47182 WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control

Missing Authorization vulnerability in Wpexpertsio APIExperts Square for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.4.1...

5.3CVSS0.00513EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:22 p.m.64 views

CVE-2022-47182

CVE-2022-47182 : WordPress plugin APIExperts Square for WooCommerce (affected versions:

5.3CVSS8.5AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.7 views

PT-2024-11754 · Apiexperts · Apiexperts Square For Woocommerce

Name of the Vulnerable Software and Affected Versions: APIExperts Square for WooCommerce versions n/a through 4.4.1 Description: The issue affects the APIExperts Square for WooCommerce plugin, allowing exploitation of incorrectly configured access control security levels due to a missing...

5.3CVSS9.7AI score0.00513EPSS
SaveExploits0References10
NVD
NVD
added 2024/12/09 1:15 p.m.9 views

CVE-2023-49851

Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square Thumbnails: from n/a through 1.1.1...

5.3CVSS0.00457EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.13 views

CVE-2023-30486

Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0...

4.3CVSS0.00712EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2024/12/09 1:15 p.m.5 views

CVE-2023-30486

Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through = 2.0.0...

4.3CVSS5.8AI score0.00712EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.13 views

CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control

Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through = 2.0.0...

4.3CVSS6.9AI score0.00712EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/12/09 11:31 a.m.30 views

CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control

Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0...

4.3CVSS0.00712EPSS
SaveExploits1References1
CVE
CVE
added 2024/12/09 11:31 a.m.46 views

CVE-2023-30486

CVE-2023-30486 refers to WordPress Square theme vulnerability (

4.3CVSS8.5AI score0.00712EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.17 views

CVE-2023-49851 WordPress Square Thumbnails plugin <= 1.1.1 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square Thumbnails: from n/a through 1.1.1...

5.3CVSS0.00457EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.11 views

CVE-2023-49851 WordPress Square Thumbnails plugin <= 1.1.1 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square Thumbnails: from n/a through 1.1.1...

5.3CVSS5.3AI score0.00457EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.8 views

WordPress plugin Square Thumbnails 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.7AI score0.00457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.10 views

PT-2024-12239 · Hasthemes · Hashthemes Square

Name of the Vulnerable Software and Affected Versions: HashThemes Square versions n/a through 2.0.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For HashThemes Square...

4.3CVSS9.4AI score0.00712EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.10 views

WordPress plugin Square 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.7AI score0.00712EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/11/23 3:25 a.m.12 views

CVE-2024-11362 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting

The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.112.0. This makes it...

6.1CVSS6.4AI score0.00437EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/23 3:25 a.m.32 views

CVE-2024-11362 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting

The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.112.0. This makes it...

6.1CVSS0.00437EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.6 views

PT-2024-30308 · Unknown · Typesquare Webfonts

Name of the Vulnerable Software and Affected Versions: TypeSquare Webfonts versions 2.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.0.7 and earlier,...

5.3CVSS6.5AI score0.0038EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:20 p.m.3 views

Malicious code in square-red-puffin (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/10/09 9:33 a.m.467 views

Exploit for CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Missing Authorization via...

4.3CVSS6.9AI score0.00712EPSS
SaveExploits1
NVD
NVD
added 2024/10/06 1:15 p.m.16 views

CVE-2024-47338

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-for-give allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through = 1.3...

8.5CVSS0.00423EPSS
SaveExploits0References1
Rows per page
Query Builder