370 matches found
WordPress WC Marketplace Plugin <= 4.0.25 is vulnerable to Broken Access Control
Software WC Marketplace Type Plugin Vulnerable versions = 4.0.25 Fixed in 4.0.26 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24703 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 7837c53d253a Credits Le Ngoc Anh Required...
WordPress WC Marketplace Plugin <= 4.0.23 is vulnerable to Broken Access Control
Software WC Marketplace Type Plugin Vulnerable versions = 4.0.23 Fixed in 4.0.24 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51355 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 98133d2bdac6 Credits thiennv Required privilege...
CVE-2023-48327
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n...
CVE-2023-48327 WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n...
CVE-2023-48327 WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n...
CVE-2023-48327
CVE-2023-48327: WC Vendors – WooCommerce Marketplace plugin has an SQL Injection vulnerability in versions
CVE-2023-48781
Cross-Site Request Forgery CSRF vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This issue affects MkRapel Regiones y Ciudades de Chile para WC: from n/a through 4.3.0...
CVE-2023-48781
CVE-2023-48781: MkRapel Regiones y Ciudades de Chile para WC WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) for versions up to and including 4.3.0. Public advisories indicate unauthenticated attackers could trigger actions on behalf of site admins; the vulnerability is curren...
WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection
Software WC Vendors Marketplace Type Plugin Vulnerable versions = 2.4.7 Fixed in 2.4.7.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-48327 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 9914d19a70b0 Credits LEE SE HYOUNG hackintoanetwork Required...
CVE-2023-47519
CVE-2023-47519 is a Cross-Site Request Forgery (CSRF) vulnerability in the WC Product Table Lite (WooCommerce Product Table Lite) plugin. Affected versions are 2.6.2 and earlier; a fix is available in version 3.1.0 and later. The PatchStack entry notes unauthenticated access and a low-severity fi...
WC Captcha <= 1.5 - Admin+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-46210
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...
CVE-2023-46210 WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...
CVE-2023-46210 WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...
CVE-2023-46210
CVE-2023-46210 affects the WebCource WC Captcha plugin for WordPress, with a Stored Cross-Site Scripting (XSS) vulnerability in versions 1.4 and validating site inputs, along with standard patching practices.
PT-2023-29908 · Webcource · Webcource Wc Captcha
Name of the Vulnerable Software and Affected Versions: WebCource WC Captcha plugin versions = 1.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For WebCource WC Captcha plugin versions =...
WordPress Plugin WC Captcha Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...