wordpress woocommerce_order_proposal vulnerabilities (CVE)

CVE records published for wordpress woocommerce_order_proposal, newest first. Follow to get an email when a new one appears.

1 results

7.2High

CVE-2024-9927 2 years ago

WooCommerce Order Proposal <= 2.0.5 - Authenticated (Shop Manager+) Privilege Escalation via Order Proposal

WP Overnight BV WooCommerce Order Proposal; wordpress woocommerce_order_proposal

The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible …