plugin

Woocommerce Order Proposal Vulnerabilities

1 known security issue reported for the Woocommerce Order Proposal WordPress plugin. Most recent disclosed Oct 22, 2024.

1 high

Running Woocommerce Order Proposal on your site? Check whether your installed version is affected.

Scan your site free

WooCommerce Order Proposal <= 2.0.5 - Authenticated (Shop Manager+) Privilege Escalation via Order Proposal

high

The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible for authenticated attackers, with Shop Manager-level access a...

CVSS:: 7.2
Affected:: up to 2.0.5
Fixed in:: 2.0.6
Disclosed:: Oct 22, 2024

CVE-2024-9927 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database