Lucene search
+L

3 matches found

NVD
NVD
added 2025/02/20 10:15 a.m.27 views

CVE-2024-13520

The Gift Cards Gift Vouchers and Packages WooCommerce Supported plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'updatevoucherprice', 'updatevoucherdate', 'updatevouchernote' functions in all versions up to, and...

5.3CVSS0.00301EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/20 9:21 a.m.30 views

CVE-2024-13520 Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates

The Gift Cards Gift Vouchers and Packages WooCommerce Supported plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'updatevoucherprice', 'updatevoucherdate', 'updatevouchernote' functions in all versions up to, and...

5.3CVSS0.00301EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/20 9:21 a.m.57 views

CVE-2024-13520

CVE-2024-13520 — The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) WordPress plugin is vulnerable due to a missing capability check in update_voucher_price, update_voucher_date, and update_voucher_note, affecting all versions up to 4.4.6. This allows unauthenticated attackers to...

5.3CVSS7.2AI score0.00301EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder