CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-35173 – WordPress WC Serial Numbers plugin <= 1.7.3 - Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2024-35173
10 May 2024 — Missing Authorization vulnerability in PluginEver Serial Numbers for WooCommerce – License Manager.This issue affects Serial Numbers for WooCommerce – License Manager: from n/a through 1.7.3. Vulnerabilidad de autorización faltante en PluginEver Serial Numbers para WooCommerce – License Manager. Este problema afecta a Serial Numbers para WooCommerce – License Manager: desde n/a hasta 1.7.3. The WC Serial Numbers – Ultimate License Manager for Selling, Licensing & Securely Delivering Digital Content with Woo... • https://patchstack.com/database/vulnerability/wc-serial-numbers/wordpress-wc-serial-numbers-plugin-1-7-2-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-46078 – WordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)
https://notcve.org/view.php?id=CVE-2023-46078
16 Oct 2023 — Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en el complemento PluginEver WC Serial Numbers en versiones <= 1.6.3. The Serial Numbers for WooCommerce – License Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.3. This is due to missing nonce validation on the process_bulk_actions function. This makes it possible for unauthenticated a... • https://patchstack.com/database/vulnerability/wc-serial-numbers/wordpress-serial-numbers-for-woocommerce-license-manager-plugin-1-6-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •