512 matches found
Malicious code in woo-interest-in-products (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c02a1fed016c6ea57e23f22d9ce66fd6e951fbc137f586bc556c53cc8d97a0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7214 Malicious code in woo-interest-in-products (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c02a1fed016c6ea57e23f22d9ce66fd6e951fbc137f586bc556c53cc8d97a0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress WPify Woo Czech plugin <= 3.5.6 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress WPify Woo Czech plugin versions = 3.5.6. Solution Update the WordPress WPify Woo Czech plugin to the latest available version at least 3.5.7...
CVE-2022-1020 Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call
The Product Table for WooCommerce wooproducttable WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing...
WordPress Woo Document Preview plugin <= 1.3.0 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability
Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Woo Document Preview plugin versions = 1.3.0. Solution Update the WordPress Woo Document Preview plugin to the latest available version at least 1.4.0...
Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call
The plugin does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or o...
WordPress Woo Admin Product Notes plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Woo Admin Product Notes plugin versions = 1.0.0. Solution No patched version available...
WordPress Woo Admin Product Notes plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woo Admin Product Notes plugin versions = 1.0.0. Solution No patched version available...
WordPress BSD Split Pay for Stripe Connect on Woo plugin <= 3.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress BSD Split Pay for Stripe Connect on Woo plugin versions = 3.2.0. Solution Update the WordPress BSD Split Pay for Stripe Connect on Woo plugin to the latest available version at least 3.2.1...
WordPress BSD Split Pay for Stripe Connect on Woo plugin <= 3.2.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress BSD Split Pay for Stripe Connect on Woo plugin versions = 3.2.0. Solution Update the WordPress BSD Split Pay for Stripe Connect on Woo plugin to the latest available version at least 3.2.1...
WordPress Product Image Watermark for Woo plugin <= 1.0.3 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Product Image Watermark for Woo plugin versions = 1.0.3. Solution Update the WordPress Product Image Watermark for Woo plugin to the latest available version at least 1.0.4...
WordPress Sticky add to cart for Woo plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Sticky add to cart for Woo plugin versions = 1.0.2. Solution No patched version available...
WordPress Sticky add to cart for Woo plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Sticky add to cart for Woo plugin versions = 1.0.2. Solution No patched version available...
Woo MerchantX <= 1.0 - CSRF Bypass
The plugin does not properly check for CSRF in its merchantxstepOneaddBilling, merchantxstepOne and merchantxdeletePaymentMethod functions, allowing attacker to make logged in users call them and perform unwanted actions...
WordPress Advanced Woo Search Plugin < 2.00 Information Disclosure Vulnerability
The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
WordPress Advanced Woo Search Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Advanced Woo Search is a search plugin used in it. An information disclosure vulnerability exists in ajax query requests in Wordpress...
CVE-2020-12070
The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-search.php...
CVE-2020-12070
Summary: The WordPress plugin Advanced Woo Search (versions up to 1.99) exposes a sensitive information disclosure vulnerability. According to multiple connected sources, every ajax search request over the sql field in includes/class-aws-search.php can disclose sensitive data. The issue is docume...
WordPress Advanced Woo Search plugin <= 1.99 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability found in WordPress Advanced Woo Search plugin versions = 1.99. Solution Update the WordPress Advanced Woo Search plugin to the latest available version at least 2.00...