CVE-2024-1679

🗓️ 02 May 2024 16:52:35Reported by WordfenceType

Print Labels with Barcodes plugin for WooCommerce in WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 3.4.6 due to insufficient input sanitization and output escaping, allowing authenticated attackers to inject arbitrary web scripts

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin Print Labels with Barcodes 安全漏洞	2 May 202400:00	–	cnnvd
Cvelist	CVE-2024-1679 Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Templates	2 May 202416:52	–	cvelist
EUVD	EUVD-2024-17414	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1679	2 May 202417:15	–	nvd
Patchstack	WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Templates vulnerability	30 Apr 202407:45	–	patchstack
Patchstack	WordPress Print Barcode Labels for your WooCommerce products/orders Plugin <= 3.4.6 is vulnerable to Cross Site Scripting (XSS)	30 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-18215 · WordPress · Print Labels With Barcodes	2 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1679	23 May 202508:23	–	redhatcve
Vulnrichment	CVE-2024-1679 Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Templates	2 May 202416:52	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 29, 2024 to May 5, 2024)	9 May 202416:49	–	wordfence

NVD

Vulners

Node

ukrsolution print_labels_with_barcodesRange<3.4.7wordpress

[
  {
    "vendor": "ukrsolution",
    "product": "Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.4.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/a4-barcode-generator/trunk/class/BarcodeTemplates/BarcodeTemplatesController.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c2d03b83-c406-4d3f-b6be-015edcc15515
plugins	www.plugins.trac.wordpress.org/changeset/3083367

08 Apr 2026 19:20Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.4 - 6.4

EPSS0.00227

SSVC

CWE-79