Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:22 a.m.3 views

CVE-2024-1718

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers t...

5.3CVSS6.8AI score0.0009EPSS
Exploits0References1
NVD
NVD
added 2024/06/04 6:15 a.m.10 views

CVE-2024-1718

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers t...

5.3CVSS5.2AI score0.0009EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/04 5:32 a.m.23 views

CVE-2024-1718 Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers t...

5.3CVSS5.2AI score0.0009EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/04 5:32 a.m.17 views

CVE-2024-1718 Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers t...

5.3CVSS6.9AI score0.0009EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/04 2:10 a.m.1 views

WordPress Claudio Sanches plugin <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update vulnerability

Insufficient Verification of Data Authenticity to Order Payment Status Update vulnerability discovered by Lucio Sá in WordPress Plugin Claudio Sanches versions = 1.1.0...

5.3CVSS7AI score0.0009EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/04 12:0 a.m.8 views

WordPress Claudio Sanches Plugin <= 1.1.0 is vulnerable to Broken Access Control

Software Claudio Sanches Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-1718 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9648aa5a0b74 Credits Lucio Sá Required privilege...

5.3CVSS6.6AI score0.0009EPSS
Exploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/06/03 12:0 a.m.11 views

Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

Description The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated...

5.3CVSS6.8AI score0.0009EPSS
Exploits0References1
Rows per page
Query Builder