Read the docs

Octolize

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Octolize records in CISA KEV

No Octolize vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Ups Shipping 1 record LOW

Records

5 records

TI-2024-21702 CVE-2024-32828 · GHSA-h9fj-vwxm-9wf4

Missing authorization in Octolize Flexible Shipping

Priority LOW 20

Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-04-26 No fix listed CWE-862
TI-2024-08459 CVE-2024-9109 · GHSA-ghv9-78x5-86j2

UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset

Priority LOW 20

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00393 Published 2024-10-25 No fix listed CWE-862
TI-2024-21047 CVE-2024-31944 · GHSA-gqmf-gxrq-3j6q

WordPress WooCommerce UPS Shipping plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.002 Published 2024-04-10 No fix listed CWE-352
Open these records in search →