30 matches found
WordPress wpShopGermany IT-RECHT KANZLEI plugin 1.6-2.3 - Unauthenticated RCE vulnerability
Unauthenticated RCE vulnerability discovered by Naoki Kawahigashi in WordPress Plugin wpShopGermany IT-RECHT KANZLEI versions 1.6-2.3...
CVE-2026-88795
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...
CVE-2026-88795 wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...
CVE-2026-88795
The wpShopGermany IT-RECHT KANZLEI WordPress plugin (versions 1.6–2.3 ) contains an unauthenticated remote code execution flaw in its API authentication token mechanism. The token is derived from requester-controlled data and is created as a side effect of the validation check itself, making it p...
EUVD-2026-81347
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...
CVE-2026-88795 wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...
EUVD-2023-41820
Malicious code in bioql PyPI...
EUVD-2023-43617
Malicious code in bioql PyPI...
EUVD-2025-8390
Malicious code in bioql PyPI...
CVE-2023-37993
Auth. Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany IT-RECHT KANZLEI plugin = 1.7 versions...
CVE-2025-30804
Cross-Site Request Forgery CSRF vulnerability in maennchen1.de wpShopGermany IT-RECHT KANZLEI wpshopgermany-it-recht-kanzlei allows Cross Site Request Forgery.This issue affects wpShopGermany IT-RECHT KANZLEI: from n/a through = 2.0...
CVE-2025-30804
Cross-Site Request Forgery CSRF vulnerability in maennchen1.de wpShopGermany IT-RECHT KANZLEI wpshopgermany-it-recht-kanzlei allows Cross Site Request Forgery.This issue affects wpShopGermany IT-RECHT KANZLEI: from n/a through = 2.0...
CVE-2025-30804
CVE-2025-30804 technical details are not provided in the supplied documents. Monitor for vendor advisories and updates.
CVE-2025-30804 WordPress wpShopGermany IT-RECHT KANZLEI plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in maennchen1.de wpShopGermany IT-RECHT KANZLEI wpshopgermany-it-recht-kanzlei allows Cross Site Request Forgery.This issue affects wpShopGermany IT-RECHT KANZLEI: from n/a through = 2.0...
CVE-2025-30804 WordPress wpShopGermany IT-RECHT KANZLEI plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in maennchen1.de wpShopGermany IT-RECHT KANZLEI wpshopgermany-it-recht-kanzlei allows Cross Site Request Forgery.This issue affects wpShopGermany IT-RECHT KANZLEI: from n/a through = 2.0...
WordPress plugin wpShopGermany IT-RECHT KANZLEI 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2023-39919
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...
CVE-2023-39919
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...
CVE-2023-39919 WordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...
CVE-2023-39919
CVE-2023-39919 affects the WordPress plugin wpShopGermany – Protected Shops (versions <= 2.0). The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) that can be exploited by users with admin+ privileges to inject and execute script content. The issue stems from inadequate val...