7 matches found
CVE-2024-31283: Missing Authorization
Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2...
PT-2024-24888
Name of the Vulnerable Software and Affected Versions Zorem Advanced Local Pickup for WooCommerce versions 1.6.1 and earlier Description A Missing Authorization vulnerability has been identified in Zorem Advanced Local Pickup for WooCommerce. This issue allows for unauthorized access...
PT-2024-23929
Name of the Vulnerable Software and Affected Versions Advanced Local Pickup for WooCommerce versions 1.6.2 and earlier Description The issue is related to a Missing Authorization vulnerability in the zorem Advanced Local Pickup for WooCommerce. This vulnerability allows unauthorized access...
CVE-2024-32814: Missing Authorization
Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1...
CVE-2022-40702: Missing Authorization
Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2...
CVE-2023-2841: Improper Neutralization of Special Elements used in an SQL Command
The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...
PT-2023-21698
Name of the Vulnerable Software and Affected Versions Advanced Local Pickup for WooCommerce plugin for WordPress versions up to, and including, 1.5.5 Description The issue is related to time-based SQL Injection via the id parameter due to insufficient escaping on the user-supplied parameter and...