Lucene search
K

14 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/22 7:45 a.m.3 views

CVE-2026-4140

The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6. This is due to missing nonce validation in the niorderexportaction AJAX handler function. The handler processes settings updates when the 'page' parameter is...

4.3CVSS5.6AI score0.00006EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.5 views

WordPress plugin Ni WooCommerce Order Export 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.7AI score0.00006EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/04/21 7:5 p.m.4 views

WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Ni WooCommerce Order Export versions = 3.1.6...

4.3CVSS5.8AI score0.00006EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-52357

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00295EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:14 a.m.4 views

CVE-2024-54231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Order Export ni-woocommerce-order-export allows Reflected XSS.This issue affects Ni WooCommerce Order Export: from n/a through = 3.1.6...

7.1CVSS7.2AI score0.00295EPSS
Exploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.5 views

CVE-2024-54231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Order Export ni-woocommerce-order-export allows Reflected XSS.This issue affects Ni WooCommerce Order Export: from n/a through = 3.1.6...

7.1CVSS0.00295EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.4 views

CVE-2024-54231 WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Order Export ni-woocommerce-order-export allows Reflected XSS.This issue affects Ni WooCommerce Order Export: from n/a through = 3.1.6...

7.1CVSS8.6AI score0.00295EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.16 views

CVE-2024-54231 WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Order Export ni-woocommerce-order-export allows Reflected XSS.This issue affects Ni WooCommerce Order Export: from n/a through = 3.1.6...

7.1CVSS0.00295EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 2:24 p.m.41 views

CVE-2024-54231

CVE-2024-54231 refers to a WordPress vulnerability in the Ni WooCommerce Order Export plugin (versions

7.1CVSS7.2AI score0.00295EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.2 views

PT-2024-36109 · Unknown · Ni Woocommerce Order Export

Name of the Vulnerable Software and Affected Versions: Ni WooCommerce Order Export versions 3.1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

7.1CVSS7.1AI score0.00295EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.1 views

WordPress plugin Ni WooCommerce Order Export 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00295EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/05 8:20 p.m.2 views

WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ni WooCommerce Order Export versions = 3.1.6...

7.1CVSS6.1AI score0.00295EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/04/02 12:0 a.m.6 views

Automattic WooCommerce Order Export Cross-Site Scripting Vulnerability

Automattic WooCommerce is the United States Automattic company's set of open source e-commerce platform based on WordPress . A cross-site scripting vulnerability exists in WooCommerce Order Export in versions prior to 3.1.8. The vulnerability stems from the fact that Advanced Order Export allows...

6.1CVSS5.4AI score0.0021EPSS
Exploits3References1
CNNVD
CNNVD
added 2021/03/31 12:0 a.m.4 views

Automattic WooCommerce Order Export 跨站脚本漏洞

Automattic WooCommerce is the United States Automattic company's set of open source e-commerce platform based on WordPress . A cross-site scripting vulnerability exists in WooCommerce Order Export in versions prior to 3.1.8. The vulnerability stems from the fact that Advanced Order Export allows...

6.1CVSS5.3AI score0.0021EPSS
Exploits3References2
Rows per page
Query Builder