Логотип exploitDog
bind:CVE-2024-13525
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-13525

Количество 2

Количество 2

nvd логотип

CVE-2024-13525

12 месяцев назад

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well as hashed passwords of any user.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-r4hg-45fp-r477

12 месяцев назад

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well as hashed passwords of any user.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-13525

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well as hashed passwords of any user.

CVSS3: 6.5
0%
Низкий
12 месяцев назад
github логотип
GHSA-r4hg-45fp-r477

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well as hashed passwords of any user.

CVSS3: 6.5
0%
Низкий
12 месяцев назад

Уязвимостей на страницу