CVE-2024-1562

MEDIUM 5.3CVE-2024-1562 · Published 21/02/2024 · updated 17/06/2026

In short

CVE-2024-1562 is a MEDIUM (CVSS 5.3) vulnerability affecting woocommerce google sheet connector (gsheetconnector).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.0% of all vulnerabilities.
Fix: update to 1.3.12 or later.

Package	Affected versions	Patched versions
woocommerce google sheet connector gsheetconnector	`< 1.3.12`	`1.3.12`

Description

The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the execute_post_data function in all versions up to, and including, 1.3.11. This makes it possible for unauthenticated attackers to update plugin settings.

References

plugins.trac.wordpress.org/changeset · Patch
wordfence.com/threat-intel/vulnerabilities/id/e36df7b7-fcbc-4e5d-812c-861bfe8abb55 · Third Party Advisory

More vulnerabilities in woocommerce google sheet connector

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free