Show filters
219 Total Results
Displaying 61-70 of 219
Sort by:
Attacker Value
Unknown
CVE-2023-51499
Disclosure Date: April 12, 2024 (last updated April 13, 2024)
Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipping Per Product: from n/a through 2.5.4.
0
Attacker Value
Unknown
CVE-2024-29773
Disclosure Date: March 27, 2024 (last updated January 05, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint allows Cross-Site Scripting (XSS).This issue affects BizPrint: from n/a through 4.5.5.
0
Attacker Value
Unknown
CVE-2023-44999
Disclosure Date: March 27, 2024 (last updated April 02, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.0.
0
Attacker Value
Unknown
CVE-2024-24799
Disclosure Date: March 26, 2024 (last updated April 02, 2024)
Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2.
0
Attacker Value
Unknown
CVE-2023-6279
Disclosure Date: January 29, 2024 (last updated February 03, 2024)
The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' which could lead to DoS when using a specific option name
0
Attacker Value
Unknown
CVE-2023-4703
Disclosure Date: January 16, 2024 (last updated January 24, 2024)
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user. Updating the password of an Admin user leads to privilege escalation.
0
Attacker Value
Unknown
CVE-2022-0775
Disclosure Date: January 16, 2024 (last updated January 20, 2024)
The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment
0
Attacker Value
Unknown
CVE-2024-0251
Disclosure Date: January 13, 2024 (last updated January 20, 2024)
The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.96 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This only affects sites when the Dynamic Content for Elementor plugin is also installed.
0
Attacker Value
Unknown
CVE-2023-52222
Disclosure Date: January 08, 2024 (last updated January 12, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2.
0
Attacker Value
Unknown
CVE-2023-32795
Disclosure Date: December 28, 2023 (last updated January 05, 2024)
Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3.
0
