Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-32578ECPay Ecommerce for WooCommerce · Missing Authorization High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-32578 Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions. EPSS 0.3%Vulnerability techsupport #cwe-862	CVE Database V5	2026-10-06
Medium	4.3	EPSS 0.3%	CVE-2024-13652ECPay Ecommerce for WooCommerce · Missing Authorization Medium4.3EPSS 0.3%2025-01-30CVE Database V5CVE-2024-13652 The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clear_ecpay_debug_log' AJAX action in all versions up to, and including, 1.1.2411060. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the plugin's log files. EPSS 0.3%Vulnerability ecpaytechsupport #cwe-862	CVE Database V5	2025-01-30

Showing 1–2 of 2 results