CVE-2024-0201

MEDIO 4.3CVE-2024-0201 · Published 03/01/2024 · updated 17/06/2026

En resumen

CVE-2024-0201 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a product expiry for woocommerce (webcodingplace).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.39%, mayor que el 33.2% de las vulnerabilidades.
Solución: actualizar a 2.6 o posterior.

Package	Affected versions	Patched versions
product expiry for woocommerce webcodingplace	`< 2.6`	`2.6`

Description

The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_settings' function in versions up to, and including, 2.5. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings. CVE-2023-52179 appears to be a duplicate of this issue.

References

plugins.trac.wordpress.org/browser/product-expiry-for-woocommerce/tags/2.5/product-expiry-for-woocommerce.php · Issue Tracking
plugins.trac.wordpress.org/browser/product-expiry-for-woocommerce/tags/2.6/product-expiry-for-woocommerce.php · Issue Tracking
wordfence.com/threat-intel/vulnerabilities/id/c4006612-770a-482f-a8c2-e62f607914a9 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free