Entrar Obtener clave API

Vulnerabilidades de wordpress woocommerce_order_proposal (CVE)

Registros CVE publicados para wordpress woocommerce_order_proposal, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

7.2Alta

CVE-2024-9927 hace 2 años

WooCommerce Order Proposal <= 2.0.5 - Authenticated (Shop Manager+) Privilege Escalation via Order Proposal

WP Overnight BV WooCommerce Order Proposal; wordpress woocommerce_order_proposal

The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible …