3700 matches found
PT-2022-26008 · WordPress · Phone Orders For Woocommerce
Name of the Vulnerable Software and Affected Versions: Phone Orders for WooCommerce plugin version 3.7.1 and earlier Description: The issue concerns a Sensitive Data Exposure vulnerability in the Phone Orders for WooCommerce plugin for WordPress, affecting authenticated users with subscriber or...
CVE-2022-43488
Cross-Site Request Forgery CSRF vulnerability in Advanced Dynamic Pricing for WooCommerce plugin = 4.1.5 on WordPress leading to rule type migration...
PT-2022-26940 · Woocommerce · Advanced Dynamic Pricing For Woocommerce
Name of the Vulnerable Software and Affected Versions: Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to rule type migration. Recommendations: For Advanced Dynamic Pricing for...
CVE-2022-43491
Cross-Site Request Forgery CSRF vulnerability in Advanced Dynamic Pricing for WooCommerce plugin = 4.1.5 on WordPress leading to plugin settings import...
CVE-2022-40128
Cross-Site Request Forgery CSRF vulnerability in Advanced Order Export For WooCommerce plugin = 3.3.2 on WordPress leading to export file download...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Advanced Dynamic Pricing for WooCommerce plugin = 4.1.5 on WordPress leading to plugin settings import...
CVE-2022-43491
CVE-2022-43491 affects the WordPress plugin Advanced Dynamic Pricing for WooCommerce (versions
CVE-2022-43491 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Advanced Dynamic Pricing for WooCommerce plugin = 4.1.5 on WordPress leading to plugin settings import...
PT-2022-26942 · WordPress · Advanced Dynamic Pricing For Woocommerce
Name of the Vulnerable Software and Affected Versions: Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that affects the Advanced Dynamic Pricing for WooCommerce plugin on WordPress, leading to the potential...
PT-2022-25229 · WordPress · Advanced Order Export For Woocommerce
Name of the Vulnerable Software and Affected Versions: Advanced Order Export For WooCommerce plugin versions = 3.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to the download of export files. This occurs in the Advanced Order Export For...
CVE-2022-3536
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization attacks when they can upload a file, an...
WordPress plugin Role Based Pricing for WooCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A code issue vulnerability exists in the...
PT-2022-22760 · WordPress · Role Based Pricing For Woocommerce
Name of the Vulnerable Software and Affected Versions: Role Based Pricing for WooCommerce WordPress plugin versions prior to 1.6.3 Description: The issue concerns a lack of authorization and proper CSRF checks, as well as inadequate validation of paths provided via user input. This allows...
PT-2022-25990 · WordPress · Villatheme Ald - Aliexpress Dropshipping/Fulfillment For Woocommerce
Name of the Vulnerable Software and Affected Versions: Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin version 1.1.0 and earlier Description: The issue concerns sensitive data exposure. The estimated number of potentially affected devices worldwide is not...
WordPress Mailchimp for WooCommerce Plugin < 2.7.1 SSRF Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2022-38470
Cross-Site Request Forgery CSRF vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...
Information disclosure
Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...
CVE-2022-38134 WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability
Authenticated subscriber+ Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...