Lucene search

PatchstackCVE-2024-38699

HistoryAug 13, 2024 - 11:15 a.m.

CVE-2024-38699

2024-08-1311:15:15

CWE-862

Patchstack

web.nvd.nist.gov

cve-2024-38699

authorization

vulnerability

wp swings wallet system

woocommerce

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.5%

JSON

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13.

Affected configurations

Vulners

Vulnrichment

Node

wp_swingswallet_system_for_woocommerceRange≤2.5.13wordpress

VendorProductVersionCPE
wp_swingswallet_system_for_woocommerce*cpe:2.3:a:wp_swings:wallet_system_for_woocommerce:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wp_swings	wallet_system_for_woocommerce	*	cpe:2.3:a:wp_swings:wallet_system_for_woocommerce::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wallet-system-for-woocommerce",
    "product": "Wallet System for WooCommerce",
    "vendor": "WP Swings",
    "versions": [
      {
        "changes": [
          {
            "at": "2.5.14",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.5.13",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/wallet-system-for-woocommerce/wordpress-wallet-system-for-woocommerce-plugin-2-5-13-sensitive-data-exposure-via-exported-file-vulnerability?_s_id=cve

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-38699