CVE-2024-5769: Missing Authorization

The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

PT-2025-3544

Name of the Vulnerable Software and Affected Versions MIMO Woocommerce Order Tracking plugin for WordPress versions up to, and including, 1.0.2 Description The issue allows unauthorized modification of data due to a missing capability check on several functions. This makes it possible for...

PT-2024-37135

Name of the Vulnerable Software and Affected Versions: MIMO Woocommerce Order Tracking plugin for WordPress versions up to, and including, 1.0.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data due to a missing capability check on the mim...

CVE-2024-5768: Missing Authorization

The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mimoupdateprovider' function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level...

WordPress MIMO Woocommerce Order Tracking Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software MIMO Woocommerce Order Tracking Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5768 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 17c034ea51f0 Credits Luci...