~/products/eherman24/custom_product_tabs_for_woocommerce

pipeline liveDigest Docs

Eherman24 Custom Product Tabs For Woocommerce vulnerabilities

1 known vulnerability affecting eherman24/custom_product_tabs_for_woocommerce.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2024-11465P3HIGHCVSS 7.2≤ 1.8.52025-01-07

CVE-2024-11465 [HIGH] CWE-502 CVE-2024-11465: The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection i The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input in the 'yikes_woo_products_tabs' post meta parameter. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object.

Eherman24 Custom Product Tabs For Woocommerce vulnerabilities | cvebase