Search CVEs

Shop manager PHP Object Injection in YayMail <= 4.3.3 versions.

Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.

Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions.

Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.

Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions.

Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.

Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.

Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.

The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 4.3.2 due to insufficient input sanitiza

Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions.

Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.

Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.

Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.

Unauthenticated PHP Object Injection in Moderno < 1.43 versions.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a throug

Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.

Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.

The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and activation due to missing capability checks on the 'yaymail_install_yaysmtp' AJAX

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versions.

Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.