Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:12 a.m.•22 views

CVE-2024-31944

Cross-Site Request Forgery CSRF vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4...

4.3CVSS5.1AI score0.002EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:15 a.m.•14 views

CVE-2024-9109

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteoauthdata function in all versions up to, and including, 2.3.12. This makes it possible for authenticated attackers,...

4.3CVSS5.9AI score0.00393EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/25 6:15 a.m.•9 views

CVE-2024-9109

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteoauthdata function in all versions up to, and including, 2.3.11. This makes it possible for authenticated attackers,...

4.3CVSS5.8AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•2 views

CVE-2024-9109: Missing Authorization

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteoauthdata function in all versions up to, and including, 2.3.12. This makes it possible for authenticated attackers,...

4.3CVSS5.7AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/25 12:00 a.m.•13 views

WordPress plugin WooCommerce UPS Shipping 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.4AI score0.00393EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/10/24 12:00 a.m.•29 views

WordPress WooCommerce UPS Shipping – Live Rates and Access Points Plugin <= 2.3.11 is vulnerable to Broken Access Control

Software WooCommerce UPS Shipping – Live Rates and Access Points Type Plugin Vulnerable versions = 2.3.11 Fixed in 3.0.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9109 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b3cccbff59...

4.3CVSS6.5AI score0.00393EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2024/04/10 6:15 p.m.•23 views

CVE-2024-31944

Cross-Site Request Forgery CSRF vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4...

4.3CVSS4.6AI score0.002EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/10 5:39 p.m.•88 views

CVE-2024-31944

CVE-2024-31944 is a Cross-Site Request Forgery (CSRF) vulnerability in the Octolize WooCommerce UPS Shipping – Live Rates and Access Points plugin for WooCommerce. Affected versions are listed as from n/a through 2.2.4. The CVSS metrics indicate a Network attack vector, no confidentiality/availab...

4.3CVSS5.1AI score0.002EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/10 2:13 p.m.•13 views

WordPress WooCommerce UPS Shipping plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WooCommerce UPS Shipping – Live Rates and Access Points versions = 2.2.4...

4.3CVSS7AI score0.002EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•3 views

CVE-2024-31944: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/10 12:00 a.m.•20 views

WordPress WooCommerce UPS Shipping – Live Rates and Access Points Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce UPS Shipping – Live Rates and Access Points Type Plugin Vulnerable versions = 2.2.4 Fixed in 2.2.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31944 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

4.3CVSS6.6AI score0.002EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder