CVE-2024-43254: WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability
First published: Fri Nov 01 2024(Updated: )
Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Online Order for Clover: from n/a through 1.5.6.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zaytech Smart Online Order for Clover | <1.5.7 | |
| Clover Smart Online Order for Clover | <=1.5.6 | |
| WordPress Smart Online Order for Clover | <=1.5.6 |
Remedy
Update to 1.5.7 or a higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-43254?
CVE-2024-43254 is classified as a critical vulnerability due to its potential for unauthorized access through missing authorization controls.
How do I fix CVE-2024-43254?
To mitigate CVE-2024-43254, update the Zaytech Smart Online Order for Clover plugin to version 1.5.7 or later, which addresses the access control issue.
What versions of Zaytech Smart Online Order for Clover are affected by CVE-2024-43254?
CVE-2024-43254 affects Zaytech Smart Online Order for Clover versions up to and including 1.5.6.
Can CVE-2024-43254 lead to data breaches?
Yes, CVE-2024-43254 can potentially lead to data breaches by allowing unauthorized users to access sensitive information.
Is there a patch available for CVE-2024-43254?
Yes, a patch for CVE-2024-43254 is available in the form of an upgrade to version 1.5.7 of the Zaytech Smart Online Order for Clover.
- agent/remedy
- agent/weakness
- agent/references
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup-request
- vendor/zaytech
- canonical/zaytech smart online order for clover
- canonical/clover smart online order for clover
- vendor/wordpress
- canonical/wordpress smart online order for clover