Lucene search

CVE-2024-9109 UPS Live Rates and Access Points <= 2.3.11 - Missing Authorization to Plugin API key reset

🗓️ 25 Oct 2024 05:28:35Reported by WordfenceType

WooCommerce UPS Shipping plugin vulnerability in API key reset functio

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-9109	25 Oct 202406:15	–	nvd
Patchstack	WordPress WooCommerce UPS Shipping – Live Rates and Access Points Plugin <= 2.3.11 is vulnerable to Broken Access Control	24 Oct 202400:00	–	patchstack
CVE	CVE-2024-9109	25 Oct 202406:15	–	cve
Cvelist	CVE-2024-9109 UPS Live Rates and Access Points <= 2.3.11 - Missing Authorization to Plugin API key reset	25 Oct 202405:35	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/flexible-shipping-ups/trunk/vendor_prefixed/octolize/wp-ups-oauth/src/OAuth/Ajax.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/699fdea9-15ae-4882-9723-9a98d7d53c74
plugins	www.plugins.trac.wordpress.org/changeset/3173845/flexible-shipping-ups/tags/3.0.0/vendor_prefixed/octolize/wp-ups-oauth/src/OAuth/Ajax.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Oct 2024 05:35Current

6.7Medium risk

Vulners AI Score6.7

CVSS34.3

EPSS0.001

SSVC

CWE-862