Approved changes feed: RSS · Atom

cpe:2.3:a:saeed_sattar_beglou:hesabfa_accounting:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSaeed Sattar Beglou (8b650f6d-0bed-5354-a6e4-4dbc5fa1c4de)
ProductHesabfa Accounting (72af0b94-b168-5467-9c05-c2ded27f0ad0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48362 vulnerable 2026-06-08 07:27:15.741417 WordPress Hesabfa Accounting plugin <= 2.2.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This issue affects Hesabfa Accounting: from n/a through <= 2.2.5.
Published: 2025-08-28T12:37:10.106Z
Updated: 2026-04-28T16:12:57.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48361 vulnerable 2026-06-08 07:27:15.741110 WordPress Hesabfa Accounting plugin <= 2.2.5 - Sensitive Data Exposure via Log File vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Retrieve Embedded Sensitive Data.This issue affects Hesabfa Accounting: from n/a through <= 2.2.5.
Published: 2025-08-28T12:37:09.524Z
Updated: 2026-04-28T16:12:57.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30815 vulnerable 2026-06-08 07:17:01.869858 WordPress Hesabfa Accounting plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This issue affects Hesabfa Accounting: from n/a through <= 2.1.8.
Published: 2025-03-27T10:55:03.816Z
Updated: 2026-04-28T16:11:57.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22682 vulnerable 2026-06-08 07:10:54.618646 WordPress Hesabfa Accounting Plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Reflected XSS.This issue affects Hesabfa Accounting: from n/a through <= 2.1.2.
Published: 2025-02-03T14:23:51.260Z
Updated: 2026-04-28T16:11:04.402Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.