Known Vulnerabilities for Discount by Orc
Listed below are 10 of the newest known vulnerabilities associated with "Discount" by "Orc".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-39672 json | Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploit... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-35201 json | Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length... | Not Provided | 2026-04-06 | 2026-04-07 |
| CVE-2026-4833 json | A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c ... | Not Provided | 2026-03-26 | 2026-03-30 |
| CVE-2025-49077 json | Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh Dynamic Pricing and Discount Rules discount-and-dynamic-pricing ... | Not Provided | 2025-06-06 | 2026-04-01 |
| CVE-2025-48248 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Sitewide Disc... | Not Provided | 2025-05-19 | 2026-04-01 |
| CVE-2025-47544 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing... | Not Provided | 2025-05-07 | 2026-04-01 |
| CVE-2025-14070 json | The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th... | Not Provided | 2026-01-07 | 2026-04-08 |
| CVE-2024-6661 json | The ParityPress – Parity Pricing with Discount Rules plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... | Not Provided | 2024-07-27 | 2026-04-08 |
| CVE-2024-4468 json | The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing ... | Not Provided | 2024-06-08 | 2026-04-08 |
| CVE-2024-1120 json | The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plu... | Not Provided | 2024-03-01 | 2026-04-08 |