Skip to content
OpenAdvisories

Vendor

pektsekye

3 known vulnerabilities.

Products

Notify Odoo 2 Year Make Model Search for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8425

    Notify Odoo <= 1.0.1 - Cross-Site Request Forgery to Settings Update

    The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the _updateSettings function. This makes it possible for unauthenticated atta…

    pektsekye Notify Odoo Web / CMS
  • Medium 4.3
    CVE-2025-48265

    WordPress Year Make Model Search for WooCommerce plugin <= 1.0.11 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Pektsekye Year Make Model Search for WooCommerce ymm-search allows Cross Site Request Forgery.This issue affects Year Make Model Search for WooCommerce: from n/a through <= 1.0.11.

    pektsekye Year Make Model Search for WooCommerce Web / CMS