CVE-2024-32687

Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.0.3...

CVE-2024-32687

CVE-2024-32687 describes a missing authorization vulnerability in WPC Frequently Bought Together for WooCommerce, affecting the plugin for WooCommerce up to version 7.0.3. The description and metrics indicate a network-accessible issue with low privileges required and no UI interaction, but no co...

WordPress WPC Frequently Bought Together for WooCommerce Plugin <= 7.0.3 is vulnerable to Broken Access Control

Software WPC Frequently Bought Together for WooCommerce Type Plugin Vulnerable versions = 7.0.3 Fixed in 7.0.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32687 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bea1d55fe32c Credit...