Vulnerabilities

TI-2024-08459 CVE-2024-9109 · GHSA-ghv9-78x5-86j2

UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset

LOW 20

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00393 Published 2024-10-25 No fix listed CWE-862

TI-2024-21685 CVE-2024-32811 · GHSA-fw79-253r-px8x

Sensitive information in log files in Octolize USPS Shipping for WooCommerce – Live Rates

LOW 30

Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00365 Published 2024-06-09 No fix listed CWE-532

TI-2024-21702 CVE-2024-32828 · GHSA-h9fj-vwxm-9wf4

Missing authorization in Octolize Flexible Shipping

LOW 20

Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-04-26 No fix listed CWE-862

TI-2024-21046 CVE-2024-31943 · GHSA-7v8g-rfp5-x3hm

WordPress USPS Shipping for WooCommerce plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00188 Published 2024-04-10 No fix listed CWE-352

TI-2024-21047 CVE-2024-31944 · GHSA-gqmf-gxrq-3j6q

WordPress WooCommerce UPS Shipping plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability