CVE-2024-9189
EUVD-2024-4977928.09.2024, 02:15
The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function in all versions up to, and including, 2.12.12. This makes it possible for unauthenticated attackers to update the VAT status for any order.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wpfactory | eu\/uk_vat_manager_for_woocommerce | 𝑥 < 2.12.14 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| wpfactory | eu\/uk_vat_manager | 𝑥 ≤ 2.12.12 | ADP |
Common Weakness Enumeration