Approved changes feed: RSS · Atom

cpe:2.3:a:wpify:wpify_woo_czech:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpify (a3002118-f1f7-5af4-b857-19c2df757361)
ProductWpify Woo Czech (e33a3113-2310-57ce-8c5c-29c8581bd80e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42748 vulnerable 2026-06-08 08:03:16.649300 WordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerability
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.
Published: 2026-05-27T09:49:05.477Z
Updated: 2026-05-27T10:50:18.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1492 vulnerable 2026-06-08 06:25:40.278161 WPify Woo Czech <= 4.0.8 - Missing Authorization
MEDIUM (5.3)
The WPify Woo Czech plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the maybe_send_to_packeta function in all versions up to, and including, 4.0.8. This makes it possible for unauthenticated attackers to obtain shipping details for orders as long as the order number is known.
Published: 2024-02-20T18:56:29.589Z
Updated: 2026-04-08T16:49:29.899Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.