Flexible Shipping Usps Vulnerabilities

The USPS Shipping for WooCommerce – Live Rates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.4 via log files. This makes it possible for unauthenticated users to extract potentially sensitive information from log files.

CVSS:

5.3

Affected:

up to 1.9.4

Fixed in:

1.10.0

Disclosed:

Apr 22, 2024

CVE-2024-32811 on NVD →

The USPS Shipping for WooCommerce – Live Rates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action gran...

CVSS:

5.4

Affected:

up to 1.9.2

Fixed in:

1.9.3

Disclosed:

Apr 10, 2024

CVE-2024-31943 on NVD →