Lucene search
HistoryApr 29, 2024 - 8:15 a.m.
CVE-2024-33566
command injection
n-media orderconvo
authorization
vulnerability
os command
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4.
Affected configurations
Node
n-mediaorderconvoRange≤12.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| n\-media | orderconvo | * | cpe:2.3:*:n\-media:orderconvo:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "admin-and-client-message-after-order-for-woocommerce",
"product": "OrderConvo",
"vendor": "N-Media",
"versions": [
{
"changes": [
{
"at": "12.5",
"status": "unaffected"
}
],
"lessThanOrEqual": "12.4",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2024-33566
2024-04-29 08:15:06
wpvulndb
wpvulndb
OrderConvo < 12.5 - Missing Authorization to Arbitrary File Upload
2024-05-01 00:00:00
cvelist
cvelist
wordfence
wordfence
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
Related for CVE-2024-33566