bandido vulnerabilities
6 published CVEs name bandido among the affected products.
- 6Published CVEs6 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-2292
Morkva UA Shipping <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Weight, kg' Field
bandido · Morkva UA Shipping
Medium4.4 - CVE-2025-12170
Checkbox <= 2.8.10 - Missing Authorization to Unauthenticated Log Clearing
bandido · Checkbox
Medium5.3 - CVE-2025-6720
Vchasno Kasa <= 1.0.3 - Unauthenticated Log File Clearing
bandido · MORKVA Vchasno Kasa Integration
Medium5.3 - CVE-2025-6721
Vchasno Kasa <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation
bandido · MORKVA Vchasno Kasa Integration
Medium5.3 - CVE-2024-12049
Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters
bandido · Ukrposhta
Medium6.1 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3