538 matches found
WordPress Woo Update Variations In Cart plugin <= 0.0.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Woo Update Variations In Cart versions = 0.0.9...
WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Woo Tuner versions = 0.1.2...
WordPress Woo Store Mode plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Woo Store Mode versions = 1.0.1...
PT-2025-5072 · Woo Tuner · Woo Tuner
Name of the Vulnerable Software and Affected Versions: Woo Tuner versions 0.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Woo Tuner versions 0.1.2 and...
WordPress plugin Woo Tuner 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-12049 Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters
The Woo Ukrposhta plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'order', 'post', and 'idd' parameters in all versions up to, and including, 1.17.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2024-12049
CVE-2024-12049 refers to a vulnerability in the WordPress plugin Woo Ukrposhta where a Reflected Cross-Site Scripting (XSS) can be triggered via the order , post , and idd parameters. The issue affects all versions up to and including 1.17.11 and arises from insufficient input sanitization and ou...
PT-2025-1738 · WordPress · Woo Ukrposhta
Name of the Vulnerable Software and Affected Versions: Woo Ukrposhta plugin for WordPress versions up to and including 1.17.11 Description: The Woo Ukrposhta plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order, post, and idd parameters due to insufficient input...
WordPress plugin Woo Ukrposhta 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress Woo Ukrposhta plugin <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters vulnerability
Reflected Cross-Site Scripting via order, post, and idd Parameters vulnerability discovered by vgo0 in WordPress Plugin Woo Ukrposhta versions = 1.17.11...
WordPress Custom Product Tabs For WooCommerce plugin <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection vulnerability
Authenticated Shop Manager+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Custom Product Tabs For WooCommerce versions = 1.2.4...
CVE-2023-32507
Missing Authorization vulnerability in wp3sixty Woo Custom Emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Custom Emails: from n/a through 2.2...
CVE-2023-32507
Missing Authorization vulnerability in Mehul Kaklotar Woo Custom Emails woo-custom-emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Custom Emails: from n/a through = 2.2...
CVE-2023-32507
CVE-2023-32507 : WordPress plugin Woo Custom Emails, affected at
CVE-2023-32507 WordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in wp3sixty Woo Custom Emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Custom Emails: from n/a through 2.2...
WordPress plugin Woo Custom Emails 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Ni WooCommerce Cost Of Goods versions = 3.2.8...
CVE-2024-52444
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpopal Opal Woo Custom Product Variation opal-woo-custom-product-variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through = 1.1.3...
CVE-2024-52444 WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpopal Opal Woo Custom Product Variation opal-woo-custom-product-variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through = 1.1.3...