CVE-2024-1119
EUVD-2024-1689320.03.2024, 07:15
The Order Tip for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_tips_to_csv() function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to export the plugin's order fees.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| adrian_emil_tudorache | order_tip | 𝑥 ≤ 1.3.1 |
𝑥
= Vulnerable software versions
References