Threat database

6 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.5%	CVE-2026-39765Challan · Incorrect Privilege Assignment High7.2EPSS 0.5%2026-10-06CVE Database V5CVE-2026-39765 Shop Manager Privilege Escalation in Challan <= 3.7.88 versions. EPSS 0.5%Vulnerability WebAppick #cwe-266	CVE Database V5	2026-10-06
Medium	4.9	EPSS 0.5%	CVE-2026-73383CTX Feed · Path Traversal Medium4.9EPSS 0.5%2026-08-18CVE Database V5CVE-2026-73383 Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions. EPSS 0.5%Vulnerability WebAppick #cwe-22	CVE Database V5	2026-08-18
Critical	9.1	EPSS 0.8%	CVE-2026-66709CTX Feed · Code Injection Critical9.1EPSS 0.8%2026-08-06CVE Database V5CVE-2026-66709 CVE-2026-66709 is a critical vulnerability in WebAppick CTX Feed versions up to and including 6.6.42 that allows a shop manager to perform remote code execution (RCE) due to improper control of code generation (CWE-94). This vulnerability enables an attacker with high privileges to execute arbitrary code remotely without user interaction. EPSS 0.8%Vulnerability WebAppick #cwe-94 #ghsa-3gm5-3v88-c49w	CVE Database V5	2026-08-06
High	7.2	EPSS 0.5%	CVE-2026-39434CTX Feed · Deserialization of Untrusted Data High7.2EPSS 0.5%2026-06-15CVE Database V5CVE-2026-39434 A high-severity vulnerability (CVE-2026-39434) exists in WebAppick CTX Feed versions up to and including 6.6.26. It involves PHP Object Injection due to deserialization of untrusted data, categorized under CWE-502. This flaw can lead to complete compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.5%Vulnerability WebAppick #cwe-502	CVE Database V5	2026-06-15
Medium	5.3	EPSS 0.3%	CVE-2026-22461CTX Feed · Missing Authorization Medium5.3EPSS 0.3%2026-01-22CVE Database V5CVE-2026-22461 Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through <= 6.6.18. EPSS 0.3%Vulnerability WebAppick	CVE Database V5	2026-01-22
High	7.2	EPSS 0.6%	CVE-2024-38775CTX Feed · Improper Privilege Management High7.2EPSS 0.6%2024-08-01CVE Database V5CVE-2024-38775 Improper Privilege Management vulnerability in WebAppick CTX Feed allows Privilege Escalation.This issue affects CTX Feed: from n/a through 6.5.6. EPSS 0.6%Vulnerability WebAppick #cwe-269	CVE Database V5	2024-08-01

Showing 1–6 of 6 results