CVE-2024-34819

CVE-2024-34819 refers to a Missing Authorization vulnerability in the WordPress plugin MoreConvert MC Woocommerce Wishlist (aka MC Woocommerce Wishlist). Public records consistently indicate the flaw affects versions up to and including 1.7.2 and is categorized with a base CVSS score of 5.3 (MEDI...

CVE-2024-13694

CVE-2024-13694 : The WooCommerce Wishlist plugin for WordPress (versions up to and including 1.8.7) is vulnerable to an insecure direct object reference via the download_pdf_file() function due to missing validation on a user-controlled key. This allows unauthenticated attackers to disclose wishl...