Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2025/07/02 12:00 a.m.•17 views

WordPress plugin Amazon Products to WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A code issue vulnerability exists in the WordPress Amazon Products to WooCommerce plugin that stems from insufficient validation of the function wcta2wgeturls, which can be...

7.2CVSS7AI score0.00237EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/02 12:00 a.m.•1 views

CVE-2025-5817: Server-Side Request Forgery (SSRF)

The Amazon Products to WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.7 via the wcta2wgeturls. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

7.2CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Rows per page
Query Builder