CVE-2024-1688 in Woo Total Sales Plugin정보

요약

\~에 의해 MITRE • 2024. 05. 02.

The Woo Total Sales plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_orders_archive() function in all versions up to, and including, 3.1.4. This makes it possible for unauthenticated attackers to retrieve sales reports for the store.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2024. 02. 20.

공개

2024. 05. 02.

모더레이션

수락

항목

VDB-262410

CPE

준비됨

CWE

CWE-862 (확인됨)

CVSS

5.3 (VulDB)

EPSS

0.00457

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-1688
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-1688
CVE Details	https://www.cvedetails.com/cve/CVE-2024-1688/

◂ 이전 개요 다음 ▸

Do you know our Splunk app?

Download it now for free!