CVE-2024-4233mediumCWE-862

CVE-2024-4233: falha de média gravidade em Tyche Softwares Print Invoice & Delivery Notes…

Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Arconix Shortcodes+ Monitorar Print Invoice & Delivery Notes for WooCommerce

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.3%
Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through 2.1.10; Arconix FAQ: from n/a through 1.9.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Tyche Softwares · Arconix FAQTyche Softwares · Arconix ShortcodesTyche Softwares · Print Invoice & Delivery Notes for WooCommerce
CVEs relacionadas — Tyche Softwares Print Invoice & Delivery Notes…

No mesmo produto, das mais perigosas para as menos.

CVE-2022-46795MEDIUMWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerabilityEPSS 0.6%CVE-2024-38769MEDIUMWordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-38783MEDIUMWordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-23703MEDIUMWordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%