Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

ghera74 vulnerabilities

5 published CVEs name ghera74 among the affected products.

Newest CVEs

  • CVE-2026-8615

    ilGhera Reviso Exporter for WooCommerce <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function

    ghera74 · ilGhera Reviso Exporter for WooCommerce

    Medium4.3
  • CVE-2025-14033

    ilGhera Support System for WooCommerce <= 1.3.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    ghera74 · ilGhera Support System for WooCommerce

    Medium5.3
  • CVE-2026-2421

    ilGhera Carta Docente for WooCommerce <= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameter

    ghera74 · ilGhera Carta Docente for WooCommerce

    Medium6.5
  • CVE-2025-14034

    ilGhera Support System for WooCommerce <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion

    ghera74 · ilGhera Support System for WooCommerce

    Medium5.3
  • CVE-2024-13521

    MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    ghera74 · MailUp Auto Subscription

    Medium6.1