CVE-2024-13652

🗓️ 30 Jan 2025 13:41:58Reported by WordfenceType

ECPay Ecommerce for WooCommerce plugin allows log deletion by authenticated attackers with low access rights.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-13652	30 Jan 202514:17	–	circl
CNNVD	WordPress plugin ECPay Ecommerce for WooCommerce 安全漏洞	30 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-13652 ECPay Ecommerce for WooCommerce <= 1.1.2411060 - Missing Authorization to Authenticated (Subscriber+) Log Deletion	30 Jan 202513:41	–	cvelist
EUVD	EUVD-2024-51705	3 Oct 202520:07	–	euvd
NVD	CVE-2024-13652	30 Jan 202514:15	–	nvd
Patchstack	WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2411060 - Missing Authorization to Authenticated (Subscriber+) Log Deletion vulnerability	30 Jan 202515:51	–	patchstack
Positive Technologies	PT-2025-2236 · WordPress · Ecpay Ecommerce For Woocommerce	30 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-13652	23 May 202507:35	–	redhatcve
Vulnrichment	CVE-2024-13652 ECPay Ecommerce for WooCommerce <= 1.1.2411060 - Missing Authorization to Authenticated (Subscriber+) Log Deletion	30 Jan 202513:41	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 27, 2025 to February 2, 2025)	7 Feb 202516:53	–	wordfence

NVD

Vulners

Node

ecpay ecpay_ecommerce_for_woocommerceRange≤1.1.2411060wordpress

[
  {
    "vendor": "ecpaytechsupport",
    "product": "ECPay Ecommerce for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.2411060",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordpress	www.wordpress.org/plugins/ecpay-ecommerce-for-woocommerce/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5ae08e0b-ea17-46c1-aad3-4ecea69c1bdc

08 Apr 2026 18:20Current

4.3Medium risk

Vulners AI Score4.3

CVSS 3.14.3

EPSS0.00104

SSVC

CWE-862