2 matches found
CVE-2024-13694
The WooCommerce Wishlist High customization, fast setup,Free Elementor Wishlist, most features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the downloadpdffile function due to missing validation on a user controlled key. Th...
7.5CVSS5.8AI score0.00592EPSS
SaveExploits0References5
CVE-2024-13694: Improper Authorization
The WooCommerce Wishlist High customization, fast setup,Free Elementor Wishlist, most features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the downloadpdffile function due to missing validation on a user controlled key. Th...
7.5CVSS5.7AI score0.00592EPSS
SaveExploits0References1
20