CVE-2024-37202

🗓️ 12 Jul 2024 14:12:15Reported by PatchstackType

Missing Authorization vulnerability in BinaryCarpenter Ultimate Custom Add To Cart Button for WooCommerce allows XSS

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-37202 WordPress Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter plugin <= 1.222.16 - Broken Access Control to XSS vulnerability	12 Jul 202413:30	–	vulnrichment
Cvelist	CVE-2024-37202 WordPress Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter plugin <= 1.222.16 - Broken Access Control to XSS vulnerability	12 Jul 202413:30	–	cvelist
NVD	CVE-2024-37202	12 Jul 202414:15	–	nvd
Patchstack	WordPress Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter Plugin <= 1.222.16 is vulnerable to Broken Access Control	20 Jun 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)	27 Jun 202415:00	–	wordfence

Vulners

Node

binarycarpenter ultimate_custom_add_to_cart_button_(ajax)_for_woocommerce_by_binary_carpenterRange≤1.222.16wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-add-to-cart-button-for-woocommerce",
    "product": "Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter",
    "vendor": "BinaryCarpenter",
    "versions": [
      {
        "lessThanOrEqual": "1.222.16",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/custom-add-to-cart-button-for-woocommerce/wordpress-ultimate-custom-add-to-cart-button-ajax-for-woocommerce-by-binary-carpenter-plugin-1-222-16-broken-access-control-to-xss-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jul 2024 14:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS36.5

EPSS0.00049

SSVC

CWE-862