CVE-2024-30477: WordPress Klarna Payments for WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability
Published Mar 29, 2024
·Updated
Missing Authorization vulnerability in Klarna Klarna Payments for WooCommerce.This issue affects Klarna Payments for WooCommerce: from n/a through 3.2.4.
Affected Software
3 affected components
Klarna Klarna For Woocommerce Wordpress<=3.2.4
Klarna Payments for WooCommerce>=3.2.4
WordPress Klarna Payments for WooCommerce<=3.2.4
Remediation
Information
Update to 3.3.0 or a higher version.
Event History
Mar 29, 2024
CVE Published
via MITRE·04:01 PM
Data Sourced
via MITRE·04:01 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 25, 57260
Event
via NVD·12:51 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-30477?
CVE-2024-30477 is classified as a Missing Authorization vulnerability.
2
How do I fix CVE-2024-30477?
To fix CVE-2024-30477, upgrade Klarna Payments for WooCommerce to the latest version that addresses the vulnerability.
3
What versions are affected by CVE-2024-30477?
CVE-2024-30477 affects Klarna Payments for WooCommerce versions from n/a through 3.2.4.
4
What are the risks of CVE-2024-30477?
The risks of CVE-2024-30477 include unauthorized access and potential exploitation of sensitive user data.
5
Is CVE-2024-30477 related to any specific platform?
Yes, CVE-2024-30477 specifically affects Klarna Payments for WooCommerce, which is a plugin for WordPress.