Cryptocurrency (Token), Launchpad (Presale), Ico & Ido, Airdrop By Tokenico
Approved changes feed: RSS · Atom
cpe:2.3:a:beycanpress:cryptocurrency_(token),_launchpad_(presale),_ico_&_ido,_airdrop_by_tokenico:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Beycanpress (8b493cf9-b0a2-54b7-83b2-e5f9bd6ae84d) |
|---|---|
| Product | Cryptocurrency (Token), Launchpad (Presale), Ico & Ido, Airdrop By Tokenico (b399ef31-a641-5fa9-a1d2-f896ff67b4d4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11773 |
vulnerable | 2026-06-08 07:04:28.903714 |
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update
MEDIUM (4.3)
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveDeployedContract' function in all versions up to, and including, 2.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the WordPress option `tokenico_deployed_contracts`, poisoning the smart contract addresses displayed.
Published: 2025-11-21T07:31:57.590Z
Updated: 2026-04-08T17:28:39.930Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11771 |
vulnerable | 2026-06-08 07:04:28.901855 |
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authentication to Unauthenticated Presale Update
MEDIUM (5.3)
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'createSaleRecord' function in all versions up to, and including, 2.4.7. This makes it possible for unauthenticated attackers to manipulate presales counters.
Published: 2025-11-21T07:31:55.521Z
Updated: 2026-04-08T17:21:00.127Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.