EUVD-2025-197968

The Live sales notification for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.3.39. This is due to the "getOrders" function lacking proper authorization and capability checks when the plugin is configured to display recent order...

WordPress Live sales notification for WooCommerce plugin <= 2.3.39 - Missing Authorization to Unauthenticated Customer Data Exposure vulnerability

Missing Authorization to Unauthenticated Customer Data Exposure vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Live sales notification for WooCommerce versions = 2.3.39...

PT-2007-1002 · Openldap +1 · Openldap +1

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.3.39 OpenLDAP version 2.3.27 Description: The issue allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. This can lead to disruption of...