Vulnerabilities

TI-2024-20659 CVE-2024-31283 · GHSA-4936-pv53-5frr

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2024-06-09 No fix listed CWE-862

TI-2022-19337 CVE-2022-40702 · GHSA-7m22-rg74-5fh4

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

LOW 25

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00379 Published 2024-01-17 No fix listed CWE-862

TI-2023-02662 CVE-2023-2841 · GHSA-2wc7-rq3v-m6mj

Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection

LOW 33

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied para…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00775 Published 2023-11-22 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection