Cookie Consent by Free Privacy Policy Generator Aktuallisiere deine Cookie Einstellungen ๐Ÿ“Œ CVE-2024-2025 | BuddyPress WooCommerce my Account Integration Plugin get_simple_request code injection (ID 3055634)
Team IT Security Nachrichtenportal Logo


๐Ÿ“š CVE-2024-2025 | BuddyPress WooCommerce my Account Integration Plugin get_simple_request code injection (ID 3055634)


๐Ÿ’ก Newskategorie: Sicherheitslรผcken
๐Ÿ”— Quelle: vuldb.com

A vulnerability has been found in BuddyPress WooCommerce my Account Integration Plugin up to 3.4.20 on WordPress and classified as critical. Affected by this vulnerability is the function get_simple_request. The manipulation leads to code injection. This vulnerability is known as CVE-2024-2025. The attack can be launched remotely. There is no exploit available. ...



Sharing is caring on Social Media

๐Ÿ”— Reddit
๐Ÿ”— Telegram
๐Ÿ”— LinkedIn
๐Ÿ”— Xing
๐Ÿ”— Twitter
๐Ÿ”— Whatsapp
๐Ÿ”— Facebook
๐Ÿ”— Flipboard

Join the Team IT Security Community

๐Ÿ”— "IT Sicherheit" Reddit-Gruppe
๐Ÿ”— "IT Sicherheit" Telegramm-Seite

๐Ÿ“Œ Medium CVE-2020-5244: Buddypress Buddypress


๐Ÿ“ˆ 45.63 Punkte

๐Ÿ“Œ CVE-2023-5939 | rtMedia Plugin/BuddyPress Plugin/bbPress Plugin up to 4.6.15 on WordPress File Import code injection


๐Ÿ“ˆ 43.99 Punkte

๐Ÿ“Œ CVE-2024-2025 | BuddyPress WooCommerce my Account Integration Plugin get_simple_request code injection (ID 3055634)


๐Ÿ“ˆ 38.09 Punkte

๐Ÿ“Œ CVE-2023-5931 | rtMedia Plugin/BuddyPress Plugin/bbPress Plugin up to 4.6.15 on WordPress unrestricted upload


๐Ÿ“ˆ 37.26 Punkte

๐Ÿ“Œ CVE-2023-47777 | Automattic WooCommerce Plugin/WooCommerce Blocks Plugin on WordPress cross site scripting


๐Ÿ“ˆ 33.94 Punkte

๐Ÿ“Œ CVE-2022-2518 | Stockists Manager for Woocommerce Plugin up to 1.0.2.1 on Woocommerce stockist_settings_main cross-site request forgery


๐Ÿ“ˆ 29.29 Punkte

๐Ÿ“Œ CVE-2022-43491 | Advanced Dynamic Pricing for WooCommerce Plugin up to 4.1.5 on WooCommerce Setting cross-site request forgery


๐Ÿ“ˆ 29.29 Punkte

๐Ÿ“Œ CVE-2023-30492 | Vark Minimum Purchase for WooCommerce Plugin up to 2.0.0.1 on WooCommerce cross site scripting


๐Ÿ“ˆ 29.29 Punkte

๐Ÿ“Œ CVE-2023-51505 | realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce Store Plugin deserialization


๐Ÿ“ˆ 29.29 Punkte

๐Ÿ“Œ CVE-2023-51480 | realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Plugin cross site scripting


๐Ÿ“ˆ 29.29 Punkte

๐Ÿ“Œ Automattic WooCommerce plugin up to 3.4.5 on WordPress Privilege Check woocommerce.php denial of service


๐Ÿ“ˆ 28.29 Punkte

๐Ÿ“Œ Vuln: Wordpress BuddyPress Plugin CVE-2017-6954 Security Bypass Vulnerability


๐Ÿ“ˆ 27.96 Punkte

๐Ÿ“Œ CVE-2022-2108 | Wbcom Designs BuddyPress Group Reviews Plugin up to 2.8.3 on WordPress authorization (ID 2742109)


๐Ÿ“ˆ 27.96 Punkte

๐Ÿ“Œ CVE-2023-45755 | BuddyBoss BuddyPress Global Search Plugin up to 1.2.1 on WordPress cross site scripting


๐Ÿ“ˆ 27.96 Punkte

๐Ÿ“Œ CVE-2023-50880 | BuddyPress Plugin up to 11.3.1 on WordPress cross site scripting


๐Ÿ“ˆ 27.96 Punkte

๐Ÿ“Œ BuddyPress Docs Plugin bis 1.9.2 auf WordPress includes/component.php erweiterte Rechte


๐Ÿ“ˆ 26.97 Punkte

๐Ÿ“Œ BuddyPress Docs Plugin up to 1.9.2 on WordPress includes/component.php privilege escalation


๐Ÿ“ˆ 26.97 Punkte

๐Ÿ“Œ BuddyPress plugin up to 1.9.1 on WordPress Group Creation privilege escalation


๐Ÿ“ˆ 26.97 Punkte

๐Ÿ“Œ buddypress-activity-plus Plugin up to 1.6.1 on WordPress wp-admin/admin-ajax.php bpfb_photos[] cross site request forgery


๐Ÿ“ˆ 26.97 Punkte

๐Ÿ“Œ [webapps] WordPress Plugin Buddypress 6.2.0 - Persistent Cross-Site Scripting


๐Ÿ“ˆ 26.97 Punkte

๐Ÿ“Œ [webapps] Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution


๐Ÿ“ˆ 25.84 Punkte

๐Ÿ“Œ #0daytoday #Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution Exploit [#0day #Exploit]


๐Ÿ“ˆ 25.84 Punkte

๐Ÿ“Œ Buddypress Xprofile Custom Fields Type 2.6.3 Remote Code Execution


๐Ÿ“ˆ 25.84 Punkte

๐Ÿ“Œ CVE-2022-41685 | Viszt Pรฉter Integration for Szamlazz.hu & WooCommerce Plugin on WordPress cross-site request forgery


๐Ÿ“ˆ 25.72 Punkte

๐Ÿ“Œ CVE-2021-38349 | Integration of Moneybird for WooCommerce Plugin up to 2.1.1 on WordPress Parameter wcmb-admin.php error_description cross site scripting


๐Ÿ“ˆ 25.72 Punkte

๐Ÿ“Œ CVE-2023-52223 | MailerLite WooCommerce Integration Plugin up to 2.0.8 on WordPress cross-site request forgery


๐Ÿ“ˆ 25.72 Punkte

๐Ÿ“Œ Low CVE-2019-14796: Mq-woocommerce-products-price-bulk-edit project Mq-woocommerce-products-price-bulk-edit


๐Ÿ“ˆ 24.64 Punkte

๐Ÿ“Œ Low CVE-2016-10987: Woocommerce Persian woocommerce sms


๐Ÿ“ˆ 24.64 Punkte

๐Ÿ“Œ Medium CVE-2019-20891: Woocommerce Woocommerce


๐Ÿ“ˆ 24.64 Punkte

๐Ÿ“Œ Medium CVE-2020-29156: Woocommerce Woocommerce


๐Ÿ“ˆ 24.64 Punkte

๐Ÿ“Œ Low CVE-2022-1933: Collect and deliver interface for woocommerce project Collect and deliver interface for woocommerce


๐Ÿ“ˆ 24.64 Punkte

๐Ÿ“Œ Low CVE-2022-2099: Woocommerce Woocommerce


๐Ÿ“ˆ 24.64 Punkte

๐Ÿ“Œ CVE-2022-22965 | Oracle Retail Financial Integration 14.1.3.2/15.0.3.1/16.0.3/19.0.1 PeopleSoft Integration Bugs code injection


๐Ÿ“ˆ 24.22 Punkte

๐Ÿ“Œ CVE-2023-46634 | phoeniixx Custom My Account for Woocommerce Plugin up to 2.1 on WordPress cross-site request forgery


๐Ÿ“ˆ 23.95 Punkte

๐Ÿ“Œ CVE-2020-5244 (buddypress)


๐Ÿ“ˆ 23.31 Punkte











matomo