CVE-2024-38702: WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38702?
CVE-2024-38702 is classified as a Missing Authorization vulnerability, which poses a significant risk due to improper access controls.
How do I fix CVE-2024-38702?
To fix CVE-2024-38702, update the Product Delivery Date for WooCommerce – Lite plugin to the latest version available.
What versions are affected by CVE-2024-38702?
CVE-2024-38702 affects all versions of Product Delivery Date for WooCommerce – Lite up to and including 2.7.2.
What type of vulnerability is CVE-2024-38702?
CVE-2024-38702 is a Missing Authorization vulnerability that allows access to functionalities without proper access controls.
Who is impacted by CVE-2024-38702?
Users of the affected versions of Product Delivery Date for WooCommerce – Lite are at risk from CVE-2024-38702.