Export limit exceeded: 425942 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-0683

Bulgarisation for WooCommerce <= 3.0.14 - Missing Authorization

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and above, to generate and delete labels.

CVSS 3.1 · 7.3 High EPSS 1.2% KEV · Not listed
Vendors
Autopolis Autopolisbs
Products
Bulgarisation For Woocommerce Bulgarisation For Woocommerce
CVE-2024-2395

Bulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgery

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete labels via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Autopolis Autopolisbs
Products
Bulgarisation For Woocommerce Bulgarisation For Woocommerce