Sequential Order Numbers For Woocommerce Vulnerabilities

The Sequential Order Numbers for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted th...

CVSS:

4.3

Affected:

up to 3.6.2

Fixed in:

3.6.3

Disclosed:

Apr 4, 2025

CVE-2025-32263 on NVD →

Several BeRocket Plugins for WordPress are vulnerable to authorization bypass due to missing capability checks on functions corresponding to AJAX actions that are available to subscribers. This includes the close_notice, subscribe, disable_rate_notice, feature_request_send, get_plugin_error_ajax, close_notice, and test...

CVSS:

5.4

Affected:

up to 3.5.7.6

Fixed in:

3.5.7.7

Disclosed:

Dec 13, 2022

CVE-2022-45813 on NVD →