Vulnerabilities

TI-2024-03672 CVE-2024-3934 · GHSA-6mcq-3j8g-82cj

Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download

LOW 30

The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to Path Traversal in versions 7.3.0 to 7.5.1 via the mercadopagoDownloadLog function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00665 Published 2024-07-20 No fix listed CWE-22

TI-2024-01597 CVE-2024-1718 · GHSA-f96c-86vh-rwfq

Insufficient verification of data authenticity in claudiosanches Claudio Sanches…

LOW 23

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the update_order_status() function in all versions up…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.002 Published 2024-06-04 No fix listed CWE-345

Vulnerabilities

Filters

Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download

Insufficient verification of data authenticity in claudiosanches Claudio Sanches…