Lucene search
PatchstackVULNRICHMENT:CVE-2023-52179HistoryJun 11, 2024 - 10:40 a.m.
CVE-2023-52179 WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability
2024-06-1110:40:56
CWE-862
Patchstack
github.com
wordpress
woocommerce
broken access control
missing authorization
product expiry
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5.
CNA Affected
[
{
"vendor": "WebCodingPlace",
"product": "Product Expiry for WooCommerce",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "2.6",
"status": "unaffected"
}
],
"version": "n/a",
"versionType": "custom",
"lessThanOrEqual": "2.5"
}
],
"packageName": "product-expiry-for-woocommerce",
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected"
}
]
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for VULNRICHMENT:CVE-2023-52179