All CVEs — page 385 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows an attacker to inject malicious SQL queries, potentially leading to data theft or manipulation. It affects older versions of Category Discount Woocommerce and is considered high risk.
This flaw allows an attacker to inject malicious SQL commands, potentially leading to data theft or manipulation through the Admin Notices Manager in versions 1.6.0 and below.
The vulnerability allows unauthenticated attackers to delete arbitrary customer reviews in WooCommerce stores, potentially leading to loss of valuable user-generated content and impacting trust in product ratings. This represents a significant availability and integrity risk to e-commerce platforms.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or corruption.
This vulnerability allows unauthenticated users to bypass access controls in the WP Express Checkout plugin, potentially enabling them to perform actions they shouldn't be able to without authentication. This represents a significant security gap that could allow unauthorized access to sensitive functionality.
The flaw allows unauthorized access to subscriber data in MakeCommerce for WooCommerce versions 4.1.0 and earlier, due to broken access control.
This flaw allows subscribers to escalate their privileges, potentially gaining full control over the system. It is critical due to the high impact on confidentiality, integrity, and availability.
This vulnerability allows unauthenticated attackers to execute arbitrary code on affected SiteSkite <= 2.1.8 instances, leading to full compromise of the system.
The Bookly plugin allows unauthenticated users to bypass access controls and modify data through a broken access control vulnerability. This means attackers can perform actions they shouldn't be able to without needing to authenticate first.
This flaw allows an attacker to inject malicious SQL code, potentially leading to data theft or corruption in WP ERP versions 1.17.9 and earlier.
This flaw allows an attacker to inject malicious SQL commands, potentially leading to data theft or corruption. It matters because it can be exploited by unauthorized users to gain control over the database.