Wc Serial Numbers Vulnerabilities

The WC Serial Numbers – Ultimate License Manager for Selling, Licensing & Securely Delivering Digital Content with WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated...

CVSS:

5.3

Affected:

up to 2.1.0

Fixed in:

2.1.1

Disclosed:

May 10, 2024

CVE-2024-35173 on NVD →

The Serial Numbers for WooCommerce – License Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.3. This is due to missing nonce validation on the process_bulk_actions function. This makes it possible for unauthenticated attackers to call the function and perfo...

CVSS:

4.3

Affected:

up to 1.6.3

Fixed in:

1.6.4

Disclosed:

Oct 16, 2023

CVE-2023-46078 on NVD →