Lucene search
K

171 matches found

NVD
NVD
added 2024/06/11 4:15 p.m.35 views

CVE-2024-34822

Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2...

5.3CVSS0.00381EPSS
Exploits0References1
OSV
OSV
added 2024/06/11 4:15 p.m.4 views

CVE-2024-34822

Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2...

5.3CVSS5.8AI score0.00381EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/11 3:26 p.m.23 views

CVE-2024-34822 WordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2...

5.3CVSS7.2AI score0.00381EPSS
Exploits0References1
CVE
CVE
added 2024/06/11 3:26 p.m.69 views

CVE-2024-34822

CVE-2024-34822 is a Missing Authorization vulnerability in the weMail WordPress plugin (affected: weMail up to 1.14.2). Public sources (NVD, Red Hat, CVE listings, Vuln enrichment) classify the impact as a Medium Severity (CVSS v3.1 base 5.3) with no confidentiality impact, low integrity impact, ...

5.3CVSS5.7AI score0.00381EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/06/11 2:15 p.m.30 views

CVE-2024-34442

Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4...

5.3CVSS0.00373EPSS
Exploits0References1
CVE
CVE
added 2024/06/11 1:34 p.m.63 views

CVE-2024-34442

CVE-2024-34442 is a Missing Authorization vulnerability in the WordPress weDocs plugin (affected: weDocs

5.3CVSS5.7AI score0.00373EPSS
Exploits0References1
OSV
OSV
added 2024/06/11 10:15 a.m.1 views

CVE-2023-52217

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

6.3CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2024/06/11 9:26 a.m.24 views

CVE-2023-52217 WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

4.3CVSS0.00232EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.3 views

PT-2024-13470 · Wedevs · Wedevs Wp User Frontend

Name of the Vulnerable Software and Affected Versions: weDevs WP User Frontend versions 3.6.5 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in weDevs WP User Frontend. Recommendations: For versions 3.6.5 and earlier, update to a...

7.2CVSS6.8AI score0.00635EPSS
Exploits0References5
NVD
NVD
added 2024/03/26 12:15 p.m.23 views

CVE-2024-24711

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

4.3CVSS4.7AI score0.00318EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/26 11:43 a.m.25 views

CVE-2024-24711 WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

4.3CVSS5AI score0.00318EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 11:43 a.m.24 views

CVE-2024-24711 WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

4.3CVSS6.9AI score0.00318EPSS
Exploits0References1
CVE
CVE
added 2024/03/26 11:43 a.m.70 views

CVE-2024-24711

CVE-2024-24711 refers to a Missing Authorization vulnerability in the WordPress plugin WooCommerce Conversion Tracking (weDevs) affecting versions n/a–2.11. The issue arises from a missing capability check on the wcct_install_happy_addons function, allowing authenticated users (e.g., subscribers)...

4.3CVSS8.6AI score0.00318EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/26 12:0 a.m.6 views

PT-2024-20507 · Wedevs · Wedevs Woocommerce Conversion Tracking

Name of the Vulnerable Software and Affected Versions: weDevs WooCommerce Conversion Tracking versions n/a through 2.0.11 Description: The issue is related to a Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking. This vulnerability affects the specified versions of the...

4.3CVSS9.3AI score0.00318EPSS
Exploits0References5
NVD
NVD
added 2024/01/08 5:15 p.m.38 views

CVE-2024-21747

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CR...

7.6CVSS7.9AI score0.00581EPSS
Exploits0References1
Prion
Prion
added 2024/01/08 5:15 p.m.15 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CR...

3.3CVSS7.9AI score0.00581EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 4:48 p.m.2 views

CVE-2024-21747 WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CR...

7.6CVSS6.6AI score0.00581EPSS
Exploits0References1
OSV
OSV
added 2024/01/08 4:48 p.m.5 views

CVE-2024-21747 WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CR...

7.6CVSS6.8AI score0.00581EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.4 views

PT-2024-19034 · Wedevs · Wedevs Wp Erp

Name of the Vulnerable Software and Affected Versions: weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting versions 1.12.8 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also...

7.6CVSS6AI score0.00581EPSS
Exploits0References6
NVD
NVD
added 2023/12/20 6:15 p.m.21 views

CVE-2023-26525

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own...

8.1CVSS0.0057EPSS
Exploits0References1
Rows per page
Query Builder