CVE-2024-13343

creationtimestamp| type| source ---|---|--- 2025-02-01 04:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3npcce7u2h 2025-02-01 05:25:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3712 2025-02-01 05:34:57+00:00| seen|...

CVE-2024-13343

The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxassignnewroles function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

CVE-2024-13343 WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxassignnewroles function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with Subscriber-level access and above,...