CVE-2024-25929

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://patchstack.com/database/vulnerability/woocommerce-catalog-enquiry/wordpress-product-catalog-mode-for-woocommerce-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve	Third Party Advisory
https://patchstack.com/database/vulnerability/woocommerce-catalog-enquiry/wordpress-product-catalog-mode-for-woocommerce-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:multivendorx:product_catalog_mode_for_woocommerce:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 09:01

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~9.1~~	v2 : unknown v3 : 6.5
References	() https://patchstack.com/database/vulnerability/woocommerce-catalog-enquiry/wordpress-product-catalog-mode-for-woocommerce-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory	() https://patchstack.com/database/vulnerability/woocommerce-catalog-enquiry/wordpress-product-catalog-mode-for-woocommerce-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory

11 Oct 2024, 14:14

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de autorización faltante en MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX. Este problema afecta la consulta del catálogo de productos para WooCommerce de MultiVendorX: desde n/a hasta 5.0.5.
CVSS	v2 : ~~unknown~~ v3 : ~~6.5~~	v2 : unknown v3 : 9.1
First Time		Multivendorx Multivendorx product Catalog Mode For Woocommerce
References	~~() https://patchstack.com/database/vulnerability/woocommerce-catalog-enquiry/wordpress-product-catalog-mode-for-woocommerce-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve -~~	() https://patchstack.com/database/vulnerability/woocommerce-catalog-enquiry/wordpress-product-catalog-mode-for-woocommerce-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory
CPE		cpe:2.3:a:multivendorx:product_catalog_mode_for_woocommerce::::::wordpress::*

09 Jun 2024, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-09 11:15

Updated : 2024-11-21 09:01

NVD link : CVE-2024-25929

Mitre link : CVE-2024-25929

CVE.ORG link : CVE-2024-25929

JSON object : View

Products Affected

multivendorx

product_catalog_mode_for_woocommerce

CWE

CWE-862

Missing Authorization

6.5 /10