WordPress security by component

Binary MLM Woocommerce

Plugin description

Binary MLM Woocommerce is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 07, 2025; the highest CVE/CNA score is 6.1.

Plugin slug: woo-binary-mlm

Latest vulnerability

CVE-2024-12384: Binary MLM Woocommerce: Cross-site scripting

Binary MLM Woocommerce is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJan 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 07, 2025	CVE-2024-12384 Binary MLM Woocommerce: Cross-site scripting Binary MLM Woocommerce is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending
Jan 07, 2025	CVE-2024-12383 Binary MLM Woocommerce: Cross-site request forgery Binary MLM Woocommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE6.1 NVDPending