Lucene search
K

32 matches found

CVE
CVE
added 2024/10/17 12:28 p.m.42 views

CVE-2024-48022

The CVE-2024-48022 entry concerns a Stored XSS in the WordPress plugin Shortcode For Elementor Templates (

6.5CVSS5.2AI score0.00156EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/04/03 12:0 a.m.1 views

VulnCheck KEV: CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

10CVSS7.3AI score0.00555EPSS
Exploits0References1
OSV
OSV
added 2024/03/15 3:15 p.m.3 views

CVE-2023-51369

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

8.8CVSS7.3AI score0.00053EPSS
Exploits0References1
NVD
NVD
added 2024/03/15 3:15 p.m.16 views

CVE-2023-51369

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

8.8CVSS4.7AI score0.00053EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/15 2:19 p.m.16 views

CVE-2023-51369 WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

4.3CVSS7AI score0.00053EPSS
Exploits0References1
CVE
CVE
added 2024/03/15 2:19 p.m.88 views

CVE-2023-51369

CVE-2023-51369 describes a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin SysBasics Customize My Account for WooCommerce, affecting versions n/a through 1.8.3. Public sources (RH and CN/ENISA references) confirm the issue is CSRF, with remediation guidance recommending upgrad...

8.8CVSS8.6AI score0.00053EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/15 2:19 p.m.19 views

CVE-2023-51369 WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3...

4.3CVSS5AI score0.00053EPSS
Exploits0References1
OSV
OSV
added 2024/02/26 4:27 p.m.2 views

CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

9.8CVSS7.3AI score0.00555EPSS
Exploits0References1
NVD
NVD
added 2024/02/26 4:27 p.m.11 views

CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

10CVSS9.6AI score0.00555EPSS
Exploits0References1
Prion
Prion
added 2024/02/26 4:27 p.m.9 views

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

7.5CVSS7.2AI score0.00555EPSS
Exploits0References1
CVE
CVE
added 2024/02/26 3:9 p.m.123 views

CVE-2024-25925

CVE-2024-25925 describes an Unrestricted Upload of File with Dangerous Type vulnerability in the SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts WordPress plugin. Affected versions are up to 3.5.12; the issue allows unauthenticated arbitrary file uploads, enabling potential rem...

10CVSS8.6AI score0.00555EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/02/20 12:0 a.m.14 views

WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload

Description The SysBasics Easy Checkout Field Editor, Fees & Discounts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.5.12. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

10CVSS7.9AI score0.00555EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder