Lucene search

PatchstackCVELIST:CVE-2024-43134

HistoryNov 01, 2024 - 2:17 p.m.

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

2024-11-0114:17:47

CWE-862

Patchstack

www.cve.org

cve-2024-43134

missing authorization

exploiting incorrectly configured access control security levels

waitlist woocommerce

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

Percentile

9.9%

JSON

Missing Authorization vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce ( Back in stock notifier ): from n/a through 2.6.

CNA Affected

[
  {
    "vendor": "xootix",
    "product": "Waitlist Woocommerce ( Back in stock notifier )",
    "collectionURL": "https://wordpress.org/plugins",
    "packageName": "waitlist-woocommerce",
    "versions": [
      {
        "status": "affected",
        "version": "n/a",
        "lessThanOrEqual": "2.6",
        "changes": [
          {
            "at": "2.6.1",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

patchstack.com/database/vulnerability/waitlist-woocommerce/wordpress-waitlist-woocommerce-plugin-2-6-broken-access-control-vulnerability?_s_id=cve

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

Percentile

9.9%

JSON

Related for CVELIST:CVE-2024-43134