Woo Easy Duplicate Product Vulnerabilities

[en] Missing Authorization vulnerability in WriterSystem WooCommerce Easy Duplicate Product.This issue affects WooCommerce Easy Duplicate Product: from n/a through 0.3.0.7.

Affected:

up to 0.3.0.8

Fixed in:

0.3.0.8

Disclosed:

Jun 14, 2024

CVE-2023-51523 on NVD →

The WooCommerce Easy Duplicate Product plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wedp_duplicate_product_action() function hooked via AJAX in versions up to, and including, 0.3.0.7. This makes it possible for authenticated attackers, with subscriber-...

CVSS:

4.3

Affected:

up to 0.3.0.7

Fixed in:

0.3.0.8

Disclosed:

Dec 27, 2023

CVE-2023-51523 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGem WooCommerce Easy Duplicate Product plugin <= 0.3.0.0 versions.

Affected:

up to 0.3.0.1

Fixed in:

0.3.0.1

Disclosed:

Aug 15, 2023

CVE-2023-30747 on NVD →

The WooCommerce Easy Duplicate Product plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wedp_duplicated parameter in versions up to, and including, 0.3.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVSS:

6.1

Affected:

up to 0.3.0.0

Fixed in:

0.3.0.1

Disclosed:

Apr 17, 2023

CVE-2023-30747 on NVD →