Woocommerce Warranty Vulnerabilities

[en] Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9.

Affected:

up to 2.2.0

Fixed in:

2.2.0

Disclosed:

Jun 19, 2024

CVE-2023-37870 on NVD →

[en] Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

Affected:

up to 2.3.0

Fixed in:

2.3.0

Disclosed:

Jun 14, 2024

CVE-2023-51496 on NVD →

[en] Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.

Affected:

up to 2.3.0

Fixed in:

2.3.0

Disclosed:

Jun 14, 2024

CVE-2023-51495 on NVD →

The WooCommerce Warranty Requests plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.2.7

Fixed in:

2.3.0

Disclosed:

Dec 27, 2023

CVE-2023-51496 on NVD →

The WooCommerce Warranty Requests plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.2.7

Fixed in:

2.3.0

Disclosed:

Dec 27, 2023

CVE-2023-51495 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.

Affected:

up to 2.1.7

Fixed in:

2.1.7

Disclosed:

Aug 30, 2023

CVE-2023-33317 on NVD →

The WooCommerce Warranty Requests plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on one of its functions in versions up to, and including, 2.1.9. This makes it possible for authenticated attackers, with customer-level access and above, to make use of this funct...

CVSS:

6.3

Affected:

up to 2.1.9

Fixed in:

2.2.0

Disclosed:

Jul 10, 2023

CVE-2023-37870 on NVD →

The WooCommerce Warranty Requests plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

CVSS:

7.1

Affected:

up to 2.1.6

Fixed in:

2.1.7

Disclosed:

May 22, 2023

CVE-2023-33317 on NVD →