Vulnerabilities (CVE)

Filtered by vendor Mangboard Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-26631 1 Mangboard 1 Commerce 2022-06-01 5.0 MEDIUM 7.5 HIGH
Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.
CVE-2021-26609 1 Mangboard 1 Mang Board 2021-10-28 5.0 MEDIUM 7.5 HIGH
A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user information.