hdwebmobile-formula-pricing

Precios con Fórmula HDWebmobile Precio de un producto a partir de números introducidos por el cliente usando una fórmula — evaluada de forma segura, nunca con el eval de PHP. WordPress.org: https://wordpress.org/plugins/hdwebmobile-formula-pricing/ Requiere: WordPress 6.9+, WooCommerce, PHP 7.4+...

CVE-2018-20966

CVE-2018-20966: woocommerce-jetpack 3.8.0 中的 XSS 漏洞 上述漏洞的测试环境。...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Mobile-App-for-WooCommerce-CVE-Report CVE-2025-13339 漏洞披露 CVE-2025-13339 - Hippoo Mobile App for WooCommerce 中的漏洞 本仓库披露了在 Hippoo Mobile App for WooCommerce = 1.6.1 中发现的一个漏洞，该插件是 hippooo 开发的 WordPress 插件。 🛠 受影响版本 产品 : Hippoo Mobile App for WooCommerce 版本 : v1.6.1 URL :...

CVE-2024-8289

CVE-2024-8289 CVE-2024-8289 https://vulners.com/cve/CVE-2024-8289, 供应商 wcmp 产品 MultiVendorX – 终极 WooCommerce 多供应商市场解决方案...

CVE-2025-11391

PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res;...

CVE-2021-32789

CVE-2021-32789 认证盲SQL注入。WordPress woocommerce插件版本 = 2.5.0 安装 root@kitploit: git clone https://github.com/DonVorrin/CVE-2021-32789.git cd CVE-2021-32789 sudo pip install -r requirements.txt 利用 root@kitploit: python3 exploit.py Enter URL: Example: http://exploit.cve/ Enter number: 1 - Output tables...

CVE-2024-54262

CVE-2024-54262 WooCommerce 导入导出插件 = 1.5 - 认证用户（订阅者及以上）任意文件上传 描述 WordPress 的 WooCommerce 导入导出插件在所有版本（包括 1.5）中存在任意文件上传漏洞，原因是缺少文件类型验证。这使得经过身份验证的攻击者（拥有订阅者及以上级别访问权限）能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详情 类型 : plugin 标识 : import-export-for-woocommerce 受影响版本 : 1.5 CVSS 分数 : 9.9 CVSS 评级 : Critical CVSS 向量 ...

CVE-2023-2986

CVE-2023-2986 概念验证 POC Python 版本，作者：Alucard0x1 'Abandoned Cart Lite for WooCommerce' WordPress 插件中漏洞 CVE-2023-2986 的概念验证 Python 版本 鸣谢 https://github.com/Ayantaker/CVE-2023-2986...

CVE-2026-81543

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

EUVD-2026-71935

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

CVE-2026-81543

Abandoned Cart Pro for WooCommerce plugin for WordPress is affected by a Missing Authorization vulnerability in versions up to and including 10.7.1 . The root cause is the absence of capability checks and nonce verification on multiple AJAX actions (wcap_save_connector_settings, wcap_send_manual_...

CVE-2026-81543 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability

Missing Authorization to Authenticated Subscriber+ Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.7.1...

WordPress ePayco Payment Gateway for WooCommerce plugin < 8.4.7 - Unauthenticated Payment Confirmation Bypass vulnerability

Unauthenticated Payment Confirmation Bypass vulnerability discovered by Pedro Pinho in WordPress Plugin Epayco versions 8.4.7...

CVE-2026-84045

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking...

CVE-2026-84043

The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature...

EUVD-2026-70993

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking...

CVE-2026-84045 E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cart

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking...

WordPress E-cab Taxi Booking Manager for Woocommerce plugin < 2.0.5 - Unauthenticated Price Manipulation vulnerability

Unauthenticated Price Manipulation vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Taxi Booking Manager for WooCommerce versions 2.0.5...

CVE-2026-84043 ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass

The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature...