Approved changes feed: RSS · Atom

cpe:2.3:a:mestres_do_wp:checkout_mestres_wp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMestres Do Wp (5ee473a6-788c-56d2-adfb-d7faa1ca4af6)
ProductCheckout Mestres Wp (7c795766-4250-5e1b-bbd3-927981fa0dbf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32695 vulnerable 2026-06-08 07:19:00.410384 WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability
CRITICAL (9.8)
Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through <= 8.7.5.
Published: 2025-04-09T16:13:50.263Z
Updated: 2026-04-28T16:12:28.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44030 vulnerable 2026-06-08 06:45:53.461031 WordPress Checkout Mestres WP plugin <= 8.6 - Local File Inclusion vulnerability
HIGH (7.2)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP: from n/a through <= 8.6.
Published: 2024-10-02T09:19:54.252Z
Updated: 2026-05-12T22:48:06.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51472 vulnerable 2026-06-08 06:16:17.597500 WordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Account Takeover vulnerability
CRITICAL (9.8)
Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7.
Published: 2024-04-24T16:39:33.219Z
Updated: 2026-04-28T16:09:01.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51471 vulnerable 2026-06-08 06:16:17.597117 WordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Arbitrary Options Update vulnerability
HIGH (8.2)
Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7.
Published: 2024-04-24T16:14:31.881Z
Updated: 2026-04-28T16:09:01.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51469 vulnerable 2026-06-08 06:16:17.593847 WordPress Checkout Mestres WP Plugin <= 7.1.9.6 is vulnerable to SQL Injection
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestres do WP Checkout Mestres WP.This issue affects Checkout Mestres WP: from n/a through 7.1.9.6.
Published: 2023-12-31T17:46:57.669Z
Updated: 2026-04-28T16:09:01.953Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.