3713 matches found
WooRefer
WooRefer | CVE-2022-4047 - Return Refund and Exchange For WooCommerce Herramienta masiva automática para comprobar y explotar la vulnerabilidad en CVE-2022-4047 - Return Refund and Exchange For WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh...
WordPress OrderConvo < 14 - Path Traversal
WooCommerce OrderConvo WordPress plugin \u003C 14 contains a path traversal vulnerability caused by improper validation of file download paths, letting unauthenticated attackers read or download arbitrary files remotely id: CVE-2025-10162 info: name: WordPress OrderConvo 14 - Path Traversal autho...
Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover
Hippoo Mobile App for WooCommerce WordPress plugin = 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset. id: CVE-2026-10580 info: name: Hippoo Mobile App for...
WCAPF WooCommerce Ajax Product Filter - SQL Injection
WCAPF WooCommerce Ajax Product Filter = 4.2.3 contains a time-based SQL injection caused by insufficient escaping of the 'post-author' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-3396 info: name: WCAPF WooCommerce Ajax Product Filter ...
Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update
YIKES Inc. Custom Product Tabs for WooCommerce plugin \u003C= 1.7.7 contains a broken access control caused by improper permission checks in &yikes-the-content-toggle option update, letting attackers modify content without authorization. id: CVE-2022-28666 info: name: Custom Product Tabs for...
CVE-2025-15260
CVE-2025-15260：插件 MyRewards – WooCommerce 忠诚度积分与奖励中的授权缺失/访问控制失效 免责声明： 本仓库仅用于教育目的及负责任的披露 。该漏洞已向厂商报告并获得修复。请勿利用此信息在未经授权的情况下攻击系统。 摘要 在 WooCommerce 的 MyRewards（WooRewards） 插件（版本 mSource-write$data; 业务影响 经济损失： 通过操纵“订单金额”积分倍数，攻击者可生成无限奖励积分，并将其兑换为高价值折扣券或免费商品，绕过电商支付网关。 权限提升： 普通客户（订阅者）可执行插件管理操作。 数据完整性受损：...
CVE-2025-4602
eMagicOne Store Manager for WooCommerce = 1.2.5 - 未经认证的任意文件读取 eMagicOne Store Manager for WooCommerce 插件暴露了一个远程管理协议端点（?connector=bridge），允许在服务器上执行文件删除操作。其认证机制依赖于一组默认凭据（login=1，password=1）和会话密钥系统。如果默认凭据未被更改，攻击者可以轻易地进行认证，获取会话密钥，并从 WordPress 根目录或任何可访问的目录读取任意文件。 复现 提供了一个 POC CVE-2025-4602.py 来演示从服务器读...
CVE-2025-4336
eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2:...
CVE-2025-2907
CVE-2025-2907 Exploit Detalles Publicado : 2025-04-04 Actualizado : 2025-03-28 Gravedad : Crítico Puntuación CVSS: 9.8 CWE : CWE-862: CWE-862 Falta de autorización Versiones afectadas : Todas las versiones desde n/a hasta 12.3.1 Investigador :...
CVE-2024-54262
CVE-2024-54262 WooCommerce 导入导出插件 = 1.5 - 认证用户（订阅者及以上）任意文件上传 描述 WordPress 的 WooCommerce 导入导出插件在所有版本（包括 1.5）中存在任意文件上传漏洞，原因是缺少文件类型验证。这使得经过身份验证的攻击者（拥有订阅者及以上级别访问权限）能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详情 类型 : plugin 标识 : import-export-for-woocommerce 受影响版本 : 1.5 CVSS 分数 : 9.9 CVSS 评级 : Critical CVSS 向量 ...
CVE-2025-2266
🚨 CVE-2025-2266 — WordPress 插件漏洞利用 🔍 漏洞概述 Checkout Mestres do WP for WooCommerce WordPress 插件在 8.6.5 至 8.7.5 版本中存在 未经身份验证的任意选项更新漏洞 。 有漏洞的函数 cwmpUpdateOptions 缺少适当的能力检查，允许 未经验证的攻击者 更新任意 WordPress 选项。 ⚠️ 风险与利用 攻击者可： 启用用户注册 将默认角色设置为 administrator 注册一个新账户，该账户将自动获得 管理员权限 🧨 漏洞详情 CVE ID : CVE-2025-2266...
EUVD-2026-64797
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...
CVE-2024-13513
Oliver POS – WooCommerce 销售点 POS 插件 = 2.4.2.3 - 敏感信息泄露导致权限提升（账户接管） CVE-2024-13513 WordPress 的 Oliver POS – WooCommerce 销售点 POS 插件在包括 2.4.2.3 在内的所有版本中，通过日志功能存在敏感信息泄露漏洞。这使得未经身份验证的攻击者能够提取敏感数据，包括插件的 clientToken，进而可用于更改用户账户信息（如电子邮件和账户类型）。攻击者随后可以更改账户密码，导致完全接管网站。2.4.2.3 版本禁用了日志记录，但已存在日志文件的网站仍存在漏洞。 如需更多...
CVE-2026-18027 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...
CVE-2026-18027
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 4.9.8 . The flaw resides in the get_image_src_in_base64 function, which processes the customer_note parameter witho...
CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...
WordPress Cancel Order & Request Woocommerce plugin < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions vulnerability
Unauthenticated Order Content Disclosure via Reorder AJAX Actions vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Cancel order request WooCommerce versions 1.3.4.34...
CVE-2026-74009
Unauthenticated Insecure Direct Object References IDOR in Razorpay for WooCommerce = 4.8.7 versions...