579 matches found
CVE-2026-106609
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...
EUVD-2026-96376
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...
CVE-2026-104651
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...
WordPress Yaad Sarig Payment Gateway For WC plugin < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation vulnerability
Subscriber+ Arbitrary Order Payment Manipulation vulnerability discovered by Ryan Fabella in WordPress Plugin Yaad Sarig Payment Gateway For WC versions 2.2.13...
CVE-2026-104651 Yaad Sarig Payment Gateway For WC < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation via IDOR
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...
CVE-2026-104651
The Yaad Sarig Payment Gateway For WC WordPress plugin, in versions before 2.2.13 , is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The plugin fails to verify authorization or ownership of the target order during several order payment-processing actions . This allows any authent...
CVE-2026-104651 Yaad Sarig Payment Gateway For WC < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation via IDOR
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...
EUVD-2026-94178
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...
PT-2026-107401
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...
CVE-2026-39727
Subscriber Cross Site Scripting XSS in WC Fields Factory = 4.1.12 versions...
EUVD-2026-93249
Subscriber Cross Site Scripting XSS in WC Fields Factory = 4.1.12 versions...
CVE-2026-39727 WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WC Fields Factory = 4.1.12 versions...
CVE-2026-39727
The WordPress WC Fields Factory plugin versions
CVE-2026-39727 WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WC Fields Factory = 4.1.12 versions...
PT-2026-106414
Subscriber Cross Site Scripting XSS in WC Fields Factory = 4.1.12 versions...
CVE-2025-22510
CVE-2025-22510 1️⃣ घटक प्रकार वर्डप्रेस प्लगइन 2️⃣ घटक विवरण घटक नाम WC Price History for Omnibus असुरक्षित संस्करण इस प्लगइन को सक्रिय करने के लिए, पहले WooCommerce प्लगइन स्थापित और सक्रिय होना चाहिए। 2. PHP Object Injection भेद्यता का परीक्षण करने के लिए, wp-config.php फ़ाइल के नीचे निम्नलिखित...
CVE-2026-103337
Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...
CVE-2026-103337 WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...
CVE-2026-103337 WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...
EUVD-2026-92747
Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...