CVE-2024-34370

EPSS 6.95%
Veröffentlicht 17.05.2024 09:15:43
Zuletzt bearbeitet 12.02.2025 15:42:09
Quelle audit@patchstack.com
Teams Watchlist Login
Unerledigt Login

Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wpfactory ≫ Ean For Woocommerce SwPlatformwordpress Version < 4.9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.95%	0.911

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
audit@patchstack.com	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://patchstack.com/database/vulnerability/ean-for-woocommerce/wordpress-ean-for-woocommerce-plugin-4-8-9-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-34370

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-34370

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-34370

EUVD