Skip to content
OpenAdvisories

Vendor

Webkul

53 known vulnerabilities.

Products

QloApps 23 Bagisto 16 Aureus ERP 8 Krayin CRM 2 WooCommerce Point of Sale 1 Medical Prescription Attachment Plugin for WooCommerce 1 UvDesk Community 1 Ajax Quiz 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-29009 Public exploit

    WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce medical-prescription-attachment-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Medical Prescrip…

    Webkul Medical Prescription Attachment Plugin for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2024-11281

    WooCommerce Point of Sale <= 6.1.0 - Insecure Direct Object Reference to Privilege Escalation via Arbitrary User Email Change

    The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0. This is due to insufficient validation on the 'logged_in_user_id' value when option values are empty and the ability for atta…

    Webkul WooCommerce Point of Sale Web / CMS
  • Critical 10.0
    CVE-2024-0916

    Unauthenticated Remote Code Execution in UvDesk Community

    Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3.

    Webkul UvDesk Community