PT-2024-16808

Name of the Vulnerable Software and Affected Versions Order Tip for WooCommerce plugin for WordPress versions prior to 1.3.2 Description The issue allows unauthorized access to data due to a missing capability check on the export tips to csv function. This makes it possible for unauthenticated...

CVE-2024-1119: Missing Authorization

The Order Tip for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exporttipstocsv function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to export the plugin's order fees...