CVE-2024-0683

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and...

WordPress Bulgarisation for WooCommerce Plugin <= 3.0.14 is vulnerable to Broken Access Control

Software Bulgarisation for WooCommerce Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.0.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0683 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9bca55e3b9c3 Credits Francesc...