My Auctions Allegro
Approved changes feed: RSS · Atom
cpe:2.3:a:wphocus:my_auctions_allegro:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wphocus (b660bf99-e73c-51c8-8d78-804e3bfb8a4d) |
|---|---|
| Product | My Auctions Allegro (880cf5c8-6f7d-5857-bcb1-6066c3f643de) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116855 |
vulnerable | 2026-11-03 10:15:21.815503 |
WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3.
Published: 2026-10-28T11:17:47.505Z
Updated: 2026-10-29T13:47:39.509Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22491 |
vulnerable | 2026-06-08 07:51:12.950302 |
WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through <= 3.6.35.
Published: 2026-03-25T16:14:22.926Z
Updated: 2026-04-28T17:19:53.497Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22464 |
vulnerable | 2026-06-08 07:51:12.908141 |
WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows PHP Local File Inclusion.This issue affects My auctions allegro: from n/a through <= 3.6.33.
Published: 2026-01-22T16:52:40.530Z
Updated: 2026-04-28T17:16:43.111Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68567 |
vulnerable | 2026-06-08 07:41:21.392483 |
WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through <= 3.6.33.
Published: 2025-12-24T13:10:36.094Z
Updated: 2026-04-28T16:14:30.610Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68566 |
vulnerable | 2026-06-08 07:41:21.392218 |
WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through <= 3.6.35.
Published: 2025-12-24T13:10:35.820Z
Updated: 2026-04-28T16:14:30.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67943 |
vulnerable | 2026-06-08 07:41:20.634916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31542 |
vulnerable | 2026-06-08 07:18:58.114730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27009 |
vulnerable | 2026-06-08 07:14:50.812158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22733 |
vulnerable | 2026-06-08 07:10:54.693250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12851 |
vulnerable | 2026-06-08 07:04:31.084922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12850 |
vulnerable | 2026-06-08 07:04:31.084586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10048 |
vulnerable | 2026-06-08 07:02:26.218391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11707 |
vulnerable | 2026-06-08 06:23:50.263380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.