WordPress Traveler plugin <= 3.1.6 - Unauthenticated SQL Injection via order_id vulnerability

Unauthenticated SQL Injection via orderid vulnerability discovered by Lucio Sá in WordPress Theme Traveler versions = 3.1.6...

CVE-2024-2384

The WooCommerce POS plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.4.11. This is due to the plugin not properly verifying the authentication and authorization of the current user This makes it possible for authenticated attackers, with...