CVE-2024-35667

Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2024-35667

CVE-2024-35667: Missing Authorization vulnerability in WP EasyCart ≤ 5.5.19. Affected: WP EasyCart plugin for WordPress. Base CVSS 3.1 v3: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N; Base score 5.3 (Medium). Root cause/affected versions are stated; no exploit details or remediation are provided in the i...

WordPress WP EasyCart Plugin <= 5.5.19 is vulnerable to Broken Access Control

Software WP EasyCart Type Plugin Vulnerable versions = 5.5.19 Fixed in 5.6.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35667 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 392fd2a0a3c3 Credits Joshua Chan Required privilege...