Skip to content
Bandido vulnerabilities
Newest
-
bandido morkva ua shipping
Morkva UA Shipping <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Weight, kg' Field
CVE-2026-2292
4.4 Medium
-
bandido checkbox
Checkbox <= 2.8.10 - Missing Authorization to Unauthenticated Log Clearing
CVE-2025-12170
5.3 Medium
-
bandido morkva vchasno kasa integration
Vchasno Kasa <= 1.0.3 - Unauthenticated Log File Clearing
CVE-2025-6720
5.3 Medium
-
bandido morkva vchasno kasa integration
Vchasno Kasa <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation
CVE-2025-6721
5.3 Medium
-
bandido morkva ua shipping
WordPress Morkva UA Shipping plugin <= 1.0.18 - Local File Inclusion vulnerability
CVE-2025-24685
8.1 High
-
bandido ukrposhta
Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters
CVE-2024-12049
6.1 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium