CVE-2024-39650
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - audit@patchstack.com
- Published
- 2024-11-01
- Last modified
- 2026-04-28
- Weaknesses
- CWE-862
Affected products
- Woocommerce Pdf Vouchers (Wpweb)
- Woocommerce Pdf Vouchers (Wpweb Elite)
- Woocommerce Pdf Vouchers (Wpwebelite)
References
- https://patchstack.com/database/vulnerability/woocommerce-pdf-vouchers/wordpress-woocommerce-pdf-vouchers-plugin-4-9-3-…
