Lucene search

MikaPATCHSTACK:393BCB85426664372E96754333DCC237

HistoryNov 09, 2023 - 12:00 a.m.

WordPress Japanized For WooCommerce Plugin <= 2.6.4 is vulnerable to Broken Access Control

2023-11-0900:00:00

Mika

patchstack.com

broken access control

owasp top 10

cve-2023-47698

patch priority

unauthenticated

developer.

AI Score

6.6

Confidence

High

JSON

Software

Japanized For WooCommerce

Type

Plugin

Vulnerable versions

<= 2.6.4

Fixed in

2.6.5

OWASP Top 10

A1: Broken Access Control

Classification

Broken Access Control

CVE

CVE-2023-47698

Patch priority

High

CVSS severity

High (8.6)

Developer

Claim ownership

PSID

c4bc26dc8579

Credits

Mika Mika

Required privilege

Unauthenticated

Published

9 November, 2023

Expand full details Have additional information or questions about this entry? Let us know.

Solution

We advise to mitigate or resolve the vulnerability immediately.

Affected configurations

Vulners

Node

artisan_workshopjapanized_for_woocommerceRange≤2.6.4

VendorProductVersionCPE
artisan_workshopjapanized_for_woocommerce*cpe:2.3:a:artisan_workshop:japanized_for_woocommerce:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
artisan_workshop	japanized_for_woocommerce	*	cpe:2.3:a:artisan_workshop:japanized_for_woocommerce::::::::

References

wordpress.org/plugins/woocommerce-for-japan/#developers

www.cve.org/CVERecord?id=CVE-2023-47698

AI Score

6.6

Confidence

High

JSON

Related for PATCHSTACK:393BCB85426664372E96754333DCC237