Lucene search
+L

41 matches found

CVE
CVE
•added 2025/06/06 11:18 a.m.•86 views

CVE-2025-49077

CVE-2025-49077: CSRF vulnerability in WordPress plugin Dynamic Pricing and Discount Rules (versions

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 11:18 a.m.•31 views

CVE-2025-49077 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 11:18 a.m.•16 views

CVE-2025-49077 WordPress Dynamic Pricing and Discount Rules plugin <= 2.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through 2.2.9...

4.3CVSS7AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•27 views

PT-2025-24073 · Themehigh · Themehigh Dynamic Pricing/Discount Rules

Name of the Vulnerable Software and Affected Versions: ThemeHigh Dynamic Pricing and Discount Rules versions 2.2.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This can lead to security breaches where an...

4.3CVSS4.5AI score0.0014EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•9 views

CVE-2025-49077: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through = 2.2.9...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:18 a.m.•19 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS8.5AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:08 a.m.•16 views

CVE-2024-32781

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0...

7.5CVSS5.2AI score0.0068EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:16 p.m.•18 views

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS6.8AI score0.0059EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 4:15 p.m.•48 views

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS0.0059EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/10 4:15 p.m.•13 views

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 3:45 p.m.•93 views

CVE-2024-35658

CVE-2024-35658: Path Traversal vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows unauthenticated file deletion. Affected: Checkout Field Editor for WooCommerce (Pro) up to version 3.6.2. Root cause: improper limitation of a pathname to restricted directories. Remediati...

9.1CVSS9AI score0.0059EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/10 3:45 p.m.•24 views

CVE-2024-35658 WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

8.6CVSS6.9AI score0.0059EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•5 views

CVE-2024-35658: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/24 8:15 a.m.•31 views

CVE-2024-32781

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0...

7.5CVSS7.5AI score0.0068EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•9 views

CVE-2024-32781: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0...

7.5CVSS5.8AI score0.0068EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/29 1:15 p.m.•33 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS0.0027EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/29 1:15 p.m.•18 views

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

8.8CVSS7.3AI score0.0027EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/29 1:15 p.m.•31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

6.8CVSS7.2AI score0.0027EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/29 12:48 p.m.•100 views

CVE-2023-51545

CVE-2023-51545 affects the WordPress plugin "Job Manager & Career – Manage job board listings, and recruitments" (ThemeHigh). Description in connected docs indicates a Cross-Site Request Forgery leading to PHP object injection, impacting versions up to 1.4.4 (no specific vulnerable version range ...

9.6CVSS8.5AI score0.0027EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/29 12:48 p.m.•45 views

CVE-2023-51545 WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

9.6CVSS9.5AI score0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder