Lucene search
+L

3697 matches found

NVD
NVD
added 2023/10/16 9:15 a.m.17 views

CVE-2023-45638

Cross-Site Request Forgery CSRF vulnerability in euPago Eupago Gateway For Woocommerce plugin = 3.1.9 versions...

8.8CVSS7.2AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/16 9:15 a.m.8 views

CVE-2023-45638

Cross-Site Request Forgery CSRF vulnerability in euPago Eupago Gateway For Woocommerce plugin = 3.1.9 versions...

8.8CVSS7.3AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.11 views

PT-2023-29614 · WordPress · Eupago Eupago Gateway For Woocommerce

Name of the Vulnerable Software and Affected Versions: euPago Eupago Gateway For Woocommerce plugin versions = 3.1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

8.8CVSS8.8AI score0.00254EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/10/09 12:0 a.m.13 views

PT-2023-29173 · Rebing Oõ · Woocommerce Esto Plugin

Name of the Vulnerable Software and Affected Versions: Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin versions = 2.23.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...

8.8CVSS8.5AI score0.00223EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/04 3:15 p.m.9 views

CVE-2023-40559

Cross-Site Request Forgery CSRF vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin = 2.4.0 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/04 3:15 p.m.37 views

CVE-2023-40559

Cross-Site Request Forgery CSRF vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin = 2.4.0 versions...

8.8CVSS5.9AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/04 12:0 a.m.12 views

WordPress Plugin Dynamic Pricing and Discount Rules for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. The WordPress Plugin Dynamic Pricing and Discount Rules...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/03 2:15 p.m.9 views

CVE-2023-39158

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

6.5CVSS7.3AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/03 2:15 p.m.23 views

CVE-2023-39158

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

6.5CVSS5.2AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/03 1:20 p.m.55 views

CVE-2023-39158

The CVE-2023-39158 entry concerns the WordPress plugin Banner Management For WooCommerce (theDotstore) with CSRF in versions

6.5CVSS5.4AI score0.0022EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/10/03 1:15 p.m.5 views

CVE-2023-40212

Cross-Site Request Forgery CSRF vulnerability in theDotstore Product Attachment for WooCommerce plugin = 2.1.8 versions...

6.5CVSS6.9AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/03 1:15 p.m.6 views

CVE-2023-39159

Cross-Site Request Forgery CSRF vulnerability in theDotstore Fraud Prevention For Woocommerce plugin = 2.1.5 versions...

6.5CVSS7.3AI score0.0022EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/03 1:15 p.m.26 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Product Attachment for WooCommerce plugin = 2.1.8 versions...

4.3CVSS6.5AI score0.0022EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/03 12:39 p.m.58 views

CVE-2023-39159

CVE-2023-39159 : A Cross-Site Request Forgery (CSRF) vulnerability affects theDotstore Fraud Prevention For Woocommerce plugin, versions ≤ 2.1.5. The flaw could allow unauthenticated actors to perform unauthorized actions on behalf of authenticated users. Patchstack lists the required privilege a...

6.5CVSS5.4AI score0.0022EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.7 views

PT-2023-26815 · Woocommerce · Thedotstore Banner Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Banner Management For WooCommerce plugin versions = 2.4.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

6.5CVSS6.9AI score0.0022EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/02 10:15 a.m.9 views

CVE-2023-44144

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin = 3.2.7 versions...

6.1CVSS5.8AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/02 10:15 a.m.23 views

CVE-2023-44144

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin = 3.2.7 versions...

7.1CVSS6.3AI score0.00351EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/02 10:15 a.m.25 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin = 3.2.7 versions...

5.8CVSS6AI score0.00351EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/09/28 5:15 a.m.5 views

CVE-2023-5230

The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tmwoowishlisttable' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS7AI score0.00333EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/25 4:15 p.m.5 views

CVE-2023-3547

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits2References1
Rows per page
Query Builder