Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Zixn Clear all filters
TI-2024-10062 CVE-2024-10854 · GHSA-3qv7-9m5q-pf8g

Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Import

Priority LOW 20

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the buy_one_click_import_options AJAX action in all versions up to, and including…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00377 Published 2024-11-13 No fix listed CWE-862
TI-2024-10061 CVE-2024-10853 · GHSA-2g94-f2r5-7pmr

Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Order Deletion

Priority LOW 20

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeorder AJAX action in all versions up to, and including, 2.2.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00354 Published 2024-11-13 No fix listed CWE-862