Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Octolize Component: Woocommerce Ups Shipping Clear all filters
TI-2024-08459 CVE-2024-9109 · GHSA-ghv9-78x5-86j2

UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset

Priority LOW 20

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00393 Published 2024-10-25 No fix listed CWE-862