WordPress security by component

Woo Manage Fraud Orders

Plugin description

Woo Manage Fraud Orders is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 31, 2024; the highest CVE/CNA score is 6.1.

Plugin slug: woo-manage-fraud-orders

Latest vulnerability

CVE-2024-10544: Woo Manage Fraud Orders: Sensitive information exposure

Woo Manage Fraud Orders is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.

PublishedOct 31, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 31, 2024	CVE-2024-10544 Woo Manage Fraud Orders: Sensitive information exposure Woo Manage Fraud Orders is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.	See mitigation notes	CVE5.3 NVDPending
Oct 16, 2024	CVE-2024-9937 Woo Manage Fraud Orders: Cross-site scripting Woo Manage Fraud Orders is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending