Approved changes feed: RSS · Atom

cpe:2.3:a:nitesh:ultimate_auction:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNitesh (44e54758-95c4-5fa5-9524-ebcf6eb4a298)
ProductUltimate Auction (1c4132d7-3db5-56ac-b898-ca0c3a3caa96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-68084 vulnerable 2026-06-08 07:41:20.810056 WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Auction : from n/a through <= 4.3.3.
Published: 2025-12-16T08:13:05.552Z
Updated: 2026-04-28T16:14:28.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66125 vulnerable 2026-06-08 07:39:21.256773 WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.
Published: 2025-12-16T08:12:53.108Z
Updated: 2026-04-28T16:14:17.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37543 vulnerable 2026-06-08 06:39:47.894335 WordPress Ultimate Auction plugin <= 4.2.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Nitesh Ultimate Auction ultimate-auction allows Cross Site Request Forgery.This issue affects Ultimate Auction : from n/a through <= 4.2.5.
Published: 2025-01-02T12:01:02.297Z
Updated: 2026-04-28T16:10:00.828Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.