Vulnerabilities > CVE-2024-50416 - Deserialization of Untrusted Data vulnerability in Wpclever WPC Shop AS a Customer for Woocommerce

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wpclever

CWE-502

NVD

Published: 2024-10-28

Updated: 2024-10-29

Summary

Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through 1.2.6.

Vulnerable Configurations

Part	Description	Count
Application	Wpclever Wpclever WPC Shop AS A Customer FOR Woocommerce - Wpclever WPC Shop AS A Customer FOR Woocommerce 1.0.0 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.0.1 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.0.2 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.0.3 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.1.0 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.1.1 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.0 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.1 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.2 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.3 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.4 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.5 Wpclever WPC Shop AS A Customer FOR Woocommerce 1.2.6	14

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://patchstack.com/database/vulnerability/wpc-shop-as-customer/wordpress-wpc-shop-as-a-customer-for-woocommerce-plugin-1-2-6-php-object-injection-vulnerability?_s_id=cve