facturaone

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

facturaone records in CISA KEV

No facturaone vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-04078 CVE-2025-4564 · GHSA-67rg-585f-275w

TicketBAI Facturas para WooCommerce <= 3.18 - Unauthenticated Arbitrary File Deletion

MEDIUM 51

The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versions up to, and including, 3.18.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01223 Published 2025-05-15 No fix listed CWE-22

TI-2025-18484 CVE-2025-24767 · GHSA-5ch5-84x7-c2h3

WordPress TicketBAI Facturas para WooCommerce plugin <= 3.19 - SQL Injection Vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Blind SQL Injection.This issue affects TicketBAI Fa…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00441 Published 2025-06-09 No fix listed CWE-89

TI-2025-18479 CVE-2025-24762 · GHSA-f2q9-v7gq-wp5m

WordPress TicketBAI Facturas para WooCommerce plugin <= 3.45 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TicketBAI Facturas para WooCom…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0