CVE-2024-43134: WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce ( Back in stock notifier ): from n/a through 2.6.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43134?
CVE-2024-43134 is classified as a Missing Authorization vulnerability, which can lead to unauthorized access.
How do I fix CVE-2024-43134?
To fix CVE-2024-43134, update the Waitlist Woocommerce plugin to version 2.6 or later as soon as possible.
What software is affected by CVE-2024-43134?
CVE-2024-43134 affects the xootix Waitlist Woocommerce plugin and the WordPress Waitlist Woocommerce plugin with versions up to 2.6.
What kind of attacks can be executed due to CVE-2024-43134?
Exploiting CVE-2024-43134 can allow attackers to bypass security configurations and access restricted areas of the application.
Is there a patch available for CVE-2024-43134?
Yes, a patch is available in version 2.6 of the Waitlist Woocommerce plugin to mitigate CVE-2024-43134.