Woo Manage Fraud Orders <= 2.6.1 - Unauthenticated Information Exposure via Log Files
medium
The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.
- CVSS:
- 5.3
- Affected:
- up to 2.6.1
- Fix:
- No patched version reported
- Disclosed:
- Oct 30, 2024
CVE-2024-10544 on NVD →
Woo Manage Fraud Orders <= 2.6.1 - Reflected Cross-Site Scripting
medium
The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...
- CVSS:
- 6.1
- Affected:
- up to 2.6.1
- Fix:
- No patched version reported
- Disclosed:
- Oct 15, 2024
CVE-2024-9937 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database