6 matches found
CVE-2024-13641
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for...
CVE-2024-13641
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for...
CVE-2024-13641
creationtimestamp| type| source ---|---|--- 2025-02-14 05:25:18+00:00| seen| https://infosec.exchange/users/cve/statuses/114000574432565372 2025-02-14 06:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kiefipn2c 2025-02-14 07:09:55+00:00| seen|...
CVE-2024-13641 Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for...
CVE-2024-13641 Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for...
CVE-2024-13641
CVE-2024-13641 affects the WordPress plugin Return Refund and Exchange For WooCommerce (aka woo-refund-and-exchange-lite). The issue is a sensitive information exposure via the insecure directory path /wp-content/attachment that stores order refund attachments. Affected versions: all up to and in...