WordPress Place Order Without Payment for WooCommerce plugin <= 2.6.5 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WC Place Order Without Payment versions = 2.6.5...

CVE-2025-56467

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...

CVE-2025-26933

CVE-2025-26933 describes a Local File Inclusion in the WordPress plugin “WC Place Order Without Payment” (WooCommerce). Affected: WC Place Order Without Payment

WordPress plugin WC Place Order Without Payment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores open-sourced by Aimeos. A security vulnerability exists in Aimeos versions prior to 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, which stems from digital downloadable content sold in an online store that can be...

WordPress WC Place Order Without Payment plugin <= 2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WC Place Order Without Payment plugin versions = 2.1. Solution Update the WordPress WC Place Order Without Payment plugin to the latest available version at least 2.2...

Multiple vulnerabilities in OurPHP

OurPHP is a web content management system developed using the PHP language. OurPHP has multiple vulnerabilities that can be exploited by attackers to obtain sensitive information and issue refund requests without payment...

Thelia 1.3.5 Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ============================================= Thelia 1.3.5 Multiple Vulnerabilities Exploit ============================================= !/usr/bin/php | | URL: http://blackh.free.fr - http://blackh.eu |...