cbcvebase.

Webkul Woocommerce Point Of Sale vulnerabilities

1 known vulnerability affecting webkul/woocommerce_point_of_sale.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-11281P2CRITICALCVSS 9.8≤ 6.1.02024-12-25
CVE-2024-11281 [CRITICAL] CWE-862 CVE-2024-11281: The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all vers The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0. This is due to insufficient validation on the 'logged_in_user_id' value when option values are empty and the ability for attackers to change the email of arbitrary user accounts. This makes it possible for unauthent
nvd
Webkul Woocommerce Point Of Sale vulnerabilities | cvebase