VULNERABILITY INTELLIGENCE

CVE-2024-0683

CVSS score7.3 HIGH
EPSS probability1.16%
CISA KEVNot currently listed
Published2024-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in all versions up to, and including, 3.0.14. This makes it possible for unauthenticated and authenticated attackers, with subscriber-level access and above, to generate and delete labels.

Weakness classification

  • security@wordfence.com: CWE-862
  • nvd@nist.gov: CWE-862

Primary references