CVE-2023-51546

Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1...

Flexible Shipping < 4.24.16 - Missing Authorization

Description The Flexible Shipping plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an...

CVE-2024-32828

Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15...

CVE-2024-32828 WordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15...

CVE-2024-32828 WordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15...

CVE-2024-32828

CVE-2024-32828 describes a missing authorization vulnerability in the WordPress plugin “Flexible Shipping” (Octolize). Affected range: Flexible Shipping versions up to 4.24.15. Root cause per the provided docs is a missing authorization check that allows performing an unauthorized action. The con...

WordPress plugin Flexible Shipping 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-24903 · Unknown · Octolize Flexible Shipping

Name of the Vulnerable Software and Affected Versions: Octolize Flexible Shipping versions n/a through 4.24.15 Description: The issue is related to a Missing Authorization vulnerability in Octolize Flexible Shipping. This vulnerability allows unauthorized access. Recommendations: For versions n/a...

CVE-2024-32834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

CVE-2024-32834

CVE-2024-32834 involves a Stored XSS in the WebToffee WooCommerce Shipping Label plugin. Affected: WooCommerce Shipping Label (plugin) from n/a through 2.3.8. Root cause per description: Improper neutralization of input during web page generation. Impact is Cross‑Site Scripting, with Confidential...

CVE-2024-32834 WordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

CVE-2024-32834 WordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

WordPress plugin WooCommerce Shipping Label 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WooCommerce Shipping Label versions = 2.3.8...

WordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Flexible Shipping versions = 4.24.15...

WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability

Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin USPS Shipping for WooCommerce – Live Rates versions = 1.9.4...

WordPress Flexible Shipping Plugin <= 4.24.15 is vulnerable to Broken Access Control

Software Flexible Shipping Type Plugin Vulnerable versions = 4.24.15 Fixed in 4.24.16 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32828 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 049558da37db Credits Dhabaleshwar Das Requir...

WordPress USPS Shipping for WooCommerce – Live Rates Plugin <= 1.9.4 is vulnerable to Sensitive Data Exposure

Software USPS Shipping for WooCommerce – Live Rates Type Plugin Vulnerable versions = 1.9.4 Fixed in 1.10.0 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-32811 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...

WordPress WooCommerce Shipping Label Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Shipping Label Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32834 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a0358e31252f Credits Joshua Chan Required...

WooCommerce UPS Shipping – Live Rates and Access Points < 2.2.5 - Cross-Site Request Forgery

Description The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.4. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for...