Lucene search
K

13 matches found

Cvelist
Cvelist
added 2026/01/22 4:52 p.m.13 views

CVE-2025-68041 WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

7.1CVSS0.00064EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.4 views

CVE-2025-68041

CVE-2025-68041 affects Codisto Omnichannel for WooCommerce (codistoconnect) &lt;= 1.3.65. Description: Stored XSS due to improper input neutralization during web page generation. Connected sources confirm the issue exists and affects Omnichannel for WooCommerce: from n/a through

7.1CVSS5.4AI score0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.0 views

CVE-2025-68041 WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through = 1.3.65...

5.9AI score0.00064EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/15 11:59 a.m.3 views

WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by guardimo in WordPress Plugin Omnichannel for WooCommerce versions = 1.3.65...

7.1CVSS6.1AI score0.00064EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/05 4:36 a.m.2 views

CVE-2025-11727

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync function in all versions up to, and including, 1.3.65 due to insufficient input sanitization and output escaping. This...

7.2CVSS5.2AI score0.00229EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/04 4:29 a.m.2 views

CVE-2025-11727 Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync function in all versions up to, and including, 1.3.65 due to insufficient input sanitization and output escaping. This...

7.2CVSS4.9AI score0.00229EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/12/04 4:29 a.m.22 views

CVE-2025-11727 Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync function in all versions up to, and including, 1.3.65 due to insufficient input sanitization and output escaping. This...

7.2CVSS0.00229EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.3 views

PT-2025-49004

Name of the Vulnerable Software and Affected Versions Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto versions prior to 1.3.65 Description The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for...

7.2CVSS5.7AI score0.00229EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/11/07 5:33 p.m.1 views

CVE-2025-58619

Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through = 1.3.65...

8.8CVSS7AI score0.00082EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:54 p.m.2 views

CVE-2025-58619 WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through = 1.3.65...

8.8CVSS0.00082EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:54 p.m.1 views

CVE-2025-58619 WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through = 1.3.65...

8.8CVSS6.6AI score0.00082EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.3 views

PT-2025-45244

Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through = 1.3.65...

8.8CVSS7AI score0.00082EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.1 views

WordPress plugin Falang multilanguage 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.9AI score0.00082EPSS
Exploits0References1
Rows per page
Query Builder