Show filters
378 Total Results
Displaying 111-120 of 378
Sort by:
Attacker Value
Unknown
CVE-2023-37975
Disclosure Date: July 27, 2023 (last updated February 25, 2025)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Swatches for WooCommerce plugin <= 2.3.7 versions.
0
Attacker Value
Unknown
CVE-2023-36514
Disclosure Date: July 17, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions.
0
Attacker Value
Unknown
CVE-2023-36513
Disclosure Date: July 17, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions.
0
Attacker Value
Unknown
CVE-2023-36511
Disclosure Date: July 17, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions.
0
Attacker Value
Unknown
CVE-2023-35880
Disclosure Date: July 17, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.
0
Attacker Value
Unknown
CVE-2023-3525
Disclosure Date: July 12, 2023 (last updated November 09, 2023)
The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment.
0
Attacker Value
Unknown
CVE-2023-3093
Disclosure Date: July 12, 2023 (last updated February 25, 2025)
The YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2023-36630
Disclosure Date: June 25, 2023 (last updated February 25, 2025)
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
0
Attacker Value
Unknown
CVE-2023-35918
Disclosure Date: June 22, 2023 (last updated February 25, 2025)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Bulk Stock Management plugin <= 2.2.33 versions.
0
Attacker Value
Unknown
CVE-2023-35917
Disclosure Date: June 22, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions.
0
