CVE-2024-1088: Improper Access Control

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content...

PT-2024-16613

Name of the Vulnerable Software and Affected Versions Password Protected Store for WooCommerce plugin for WordPress versions up to, and including, 1.9 Description The issue allows unauthenticated attackers to extract sensitive data, including post titles and content, via the REST API. This makes ...