Skip to content
OpenAdvisories

Vendor

dugudlabs

4 known vulnerabilities.

Products

Eyewear prescription form 3 SpecFit-Virtual Try On Woocommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14365

    Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion

    The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attacker…

    dugudlabs Eyewear prescription form Web / CMS
  • Medium 5.3
    CVE-2025-14366

    Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation

    The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing authorization checks on the SubmitCatProductRequest AJAX action. This makes it possible for unauthent…

    dugudlabs Eyewear prescription form Web / CMS