Lucene search

PatchstackCVE-2023-52179

HistoryJun 11, 2024 - 11:15 a.m.

CVE-2023-52179

2024-06-1111:15:48

CWE-862

Patchstack

web.nvd.nist.gov

cve-2023-52179

webcodingplace

product expiry

woocommerce

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

EPSS

Percentile

9.0%

JSON

Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5.

Affected configurations

Vulners

Node

webcodingplaceproduct_expiry_for_woocommerceRange≤2.5wordpress

VendorProductVersionCPE
webcodingplaceproduct_expiry_for_woocommerce*cpe:2.3:a:webcodingplace:product_expiry_for_woocommerce:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
webcodingplace	product_expiry_for_woocommerce	*	cpe:2.3:a:webcodingplace:product_expiry_for_woocommerce::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "product-expiry-for-woocommerce",
    "product": "Product Expiry for WooCommerce",
    "vendor": "WebCodingPlace",
    "versions": [
      {
        "changes": [
          {
            "at": "2.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/product-expiry-for-woocommerce/wordpress-product-expiry-for-woocommerce-plugin-2-5-broken-access-control-vulnerability?_s_id=cve

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-52179