CWE-472 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-472 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2025-35939Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content …1.3%보통6.9CVE-2026-77470Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop PO…0.5%높음8.3CVE-2026-107363In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in su…0.5%보통6.1CVE-2026-94374MISP contains an insecure direct object reference vulnerability in the processModuleResultsData meth…0.4%높음8.3CVE-2026-85010The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price …0.3%보통5.3CVE-2026-107636pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that al…0.3%높음7.1CVE-2026-55384InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe…0.3%보통5.3CVE-2026-111447Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking …0.3%높음8.1
전체 목록
19건
CVE-2026-82189Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0…0.3%높음8.7
CVE-2026-91020The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift …0.3%보통5.3
CVE-2026-77999Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation frau…0.3%높음8.7
CVE-2026-115450External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 …0.2%높음7.1
CVE-2026-90987The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on th…0.2%보통5.3
CVE-2026-103671External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "Ama…0.2%보통5.3
CVE-2026-86838The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the serve…0.2%보통5.3
CVE-2026-105322The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthentic…0.2%보통5.3
CVE-2026-16453Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify th…0.2%높음7.1
CVE-2026-103080External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows …0.2%보통5.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.