Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-4233
HistoryMay 08, 2024 - 1:19 p.m.

CVE-2024-4233 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares

2024-05-0813:19:59
CWE-862
Patchstack
www.cve.org
cve-2024-4233
broken access control
missing authorization
wordpress
tyche softwares
print invoice & delivery notes
arconix shortcodes
arconix faq
vulnerability

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through 2.1.10; Arconix FAQ: from n/a through 1.9.3.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woocommerce-delivery-notes",
    "product": "Print Invoice & Delivery Notes for WooCommerce",
    "vendor": "Tyche Softwares",
    "versions": [
      {
        "changes": [
          {
            "at": "4.9.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.8.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "arconix-shortcodes",
    "product": "Arconix Shortcodes",
    "vendor": "Tyche Softwares",
    "versions": [
      {
        "changes": [
          {
            "at": "2.1.11",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.1.10",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "arconix-faq",
    "product": "Arconix FAQ",
    "vendor": "Tyche Softwares",
    "versions": [
      {
        "changes": [
          {
            "at": "1.9.4",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.9.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

Related for CVELIST:CVE-2024-4233