anhvnit

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

anhvnit records in CISA KEV

No anhvnit vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-25239 CVE-2024-37933 · GHSA-6xvm-2cc8-jpr6

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated SQL Injection vulnerability

HIGH 79

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anhvnit Woocommerce OpenPos.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00412 Published 2024-07-12 No fix listed CWE-89

TI-2024-25238 CVE-2024-37932 · GHSA-cf87-3r9r-3m95

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerability

HIGH 76

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in anhvnit Woocommerce OpenPos allows File Manipulation.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00589 Published 2024-07-12 No fix listed CWE-22

TI-2024-25241 CVE-2024-37935 · GHSA-4px4-8gjq-r2q2

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Sensitive Data Exposure vulnerability

LOW 39

Missing Authorization vulnerability in anhvnit Woocommerce OpenPos allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00423 Published 2024-08-13 No fix listed CWE-862

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0