CVE-2024-43131

CVE-2024-43131 affects Docket (WooCommerce Collections / Wishlist / Watchlist) for WordPress. Description confirms an Incorrect Authorization vulnerability: an unauthenticated attacker can delete arbitrary posts/pages due to missing/insufficient ACL enforcement. Affected releases are before 1.7.0...

CVE-2024-43132

CVE-2024-43132: Unauthenticated SQL Injection in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) prior to v1.7.0 due to improper neutralization of inputs. Exploitation details are not provided in the initial doc, but Wordfence notes the issue was patched in version 1.7.0. Affe...