CVE-2024-34751: WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability
Published May 16, 2024
·Updated
Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9.
Affected Software
2 affected components
WebToffee Order Export & Order Import for WooCommerce<=2.4.9
WordPress Order Export & Order Import for WooCommerce<=2.4.9
Remediation
Information
Update to 2.5.0 or a higher version.
Event History
May 16, 2024
CVE Published
via MITRE·03:47 PM
Data Sourced
via MITRE·03:47 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-34751?
CVE-2024-34751 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-34751?
To mitigate the risk of CVE-2024-34751, update the WebToffee Order Export & Order Import for WooCommerce plugin to version 2.5.0 or later.
3
What does CVE-2024-34751 affect?
CVE-2024-34751 affects versions of WebToffee Order Export & Order Import for WooCommerce from n/a up to and including 2.4.9.
4
What kind of vulnerability is CVE-2024-34751?
CVE-2024-34751 is a Deserialization of Untrusted Data vulnerability that can be exploited to execute arbitrary code.
5
Who is the vendor affected by CVE-2024-34751?
The vendor affected by CVE-2024-34751 is WebToffee.