Approved changes feed: RSS · Atom

cpe:2.3:a:mbe_worldwide_s.p.a.:mbe_eship:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMbe Worldwide S.P.A. (8999fca3-a6d8-5608-b917-863bed17250d)
ProductMbe Eship (c31d1918-a7c5-5552-9b7c-b603beffb903)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38742 vulnerable 2026-06-08 06:41:48.034531 WordPress MBE eShip plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2.
Published: 2024-08-13T10:18:17.565Z
Updated: 2026-04-28T16:10:05.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38729 vulnerable 2026-06-08 06:41:48.012819 WordPress MBE eShip plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in mbeelink MBE eShip mail-boxes-etc allows Cross Site Request Forgery.This issue affects MBE eShip: from n/a through <= 2.1.2.
Published: 2025-01-02T12:01:04.146Z
Updated: 2026-04-28T16:10:05.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37953 vulnerable 2026-06-08 06:39:48.298346 WordPress MBE eShip plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MBE Worldwide S.P.A. MBE eShip allows Reflected XSS.This issue affects MBE eShip: from n/a through 2.1.2.
Published: 2024-07-20T08:22:12.833Z
Updated: 2026-04-28T16:10:03.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.