WordPress BizPrint Plugin <= 4.3.39 is vulnerable to Broken Access Control

Software BizPrint Type Plugin Vulnerable versions = 4.3.39 Fixed in 4.5.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32777 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID c14f75079ee7 Credits Joshua Chan Required privilege...

BizPrint < 4.5.4 - Unauthenticated WC Order Data Access

Description The plugin is vulnerable to unauthorized access of data due to a missing capability check on the showTemplatePreview function. This makes it possible for unauthenticated attackers to expose potentially sensitive WooCommerce order data...

CVE-2024-29773

Cross-Site Request Forgery CSRF vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint allows Cross-Site Scripting XSS.This issue affects BizPrint: from n/a through 4.5.5...

CVE-2024-29773 WordPress BizPrint plugin <= 4.5.5 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint allows Cross-Site Scripting XSS.This issue affects BizPrint: from n/a through 4.5.5...

CVE-2024-29773 WordPress BizPrint plugin <= 4.5.5 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint allows Cross-Site Scripting XSS.This issue affects BizPrint: from n/a through 4.5.5...

CVE-2024-29773

CVE-2024-29773: Technical details in connected records show a CSRF vulnerability in the BizPrint (BizSwoop) plugin, allowing Cross-Site Scripting. Affected product: BizPrint (BizSwoop) with versions up to 4.5.5 (no fixed version stated in provided docs). Root cause/impact: CSRF enabling XSS. Reme...

WordPress Plugin BizPrint 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

PT-2024-23015 · Bizprint · Bizprint

Name of the Vulnerable Software and Affected Versions: BizPrint versions through 4.5.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS in BizPrint. Recommendations: For versions through 4.5.5, update to a version that...

WordPress BizPrint Plugin <= 4.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software BizPrint Type Plugin Vulnerable versions = 4.5.5 Fixed in 4.5.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-29773 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 07468ad346a6 Credits Joshua Chan Required...