Personalize Woocommerce Cart Page Vulnerabilities

[en] The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limite...

Affected:

up to 4.0

Fixed in:

4.0

Disclosed:

Jan 25, 2025

CVE-2024-12826 on NVD →

The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limited plu...

CVSS:

4.3

Affected:

up to 3.5

Fixed in:

4.0

Disclosed:

Jan 24, 2025

CVE-2024-12826 on NVD →

[en] Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected:

up to 2.5

Fixed in:

2.5

Disclosed:

Jul 5, 2019

CVE-2019-5979 on NVD →

Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS:

8.8

Affected:

up to 2.4

Fixed in:

2.5

Disclosed:

Jun 19, 2019

CVE-2019-5979 on NVD →