CVE-2024-32687: WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability
First published: Mon Apr 22 2024(Updated: )
Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.0.3.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WPC Frequently Bought Together for WooCommerce | <=7.0.3 | |
| WPC Frequently Bought Together for WooCommerce | <=7.0.3 |
Remedy
Update to 7.0.4 or a higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-32687?
CVE-2024-32687 is a missing authorization vulnerability classified as a high-severity issue affecting versions up to 7.0.3 of WPC Frequently Bought Together for WooCommerce.
How do I fix CVE-2024-32687?
To fix CVE-2024-32687, update the WPC Frequently Bought Together for WooCommerce plugin to the latest version that addresses this vulnerability.
What are the risks associated with CVE-2024-32687?
The risks associated with CVE-2024-32687 include unauthorized access to features of the WPC Frequently Bought Together for WooCommerce plugin, potentially leading to data leaks or other security breaches.
What versions of WPC Frequently Bought Together for WooCommerce are affected by CVE-2024-32687?
CVE-2024-32687 affects WPC Frequently Bought Together for WooCommerce versions from n/a up to and including 7.0.3.
Who is impacted by CVE-2024-32687?
Users of WPC Frequently Bought Together for WooCommerce up to version 7.0.3 are directly impacted by CVE-2024-32687 due to the missing authorization vulnerability.
- agent/remedy
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- vendor/wpclever
- canonical/wpc frequently bought together for woocommerce
- vendor/wordpress
- canonical/wordpress wpc frequently bought together for woocommerce