Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0797

Опубликовано: 05 фев. 2024
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 1.0.6.1. This makes it possible for subscribers and higher to execute functions intended for admin use.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pluginus:woot:*:*:*:*:*:wordpress:*:*
Версия до 1.0.6.2 (включая)

EPSS

Процентиль: 33%
0.00134
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862
CWE-862

Связанные уязвимости

CVSS3: 4.3
github
около 2 лет назад

The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 1.0.6.1. This makes it possible for subscribers and higher to execute functions intended for admin use.

EPSS

Процентиль: 33%
0.00134
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862
CWE-862