CVE-2024-34751 - WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability

Back Back to CVE browser

MEDIUM

WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability

Published May 16, 2024

4.4

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9.

Affected products

Vendor WebToffee Product Order Export & Order Import for WooCommerce Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=2.4.9

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WebToffee

Order Export & Order Import for WooCommerce

unaffected

Version	Status	Constraints
-	affected	<=2.4.9

Remediation

Vendor solution

Update to 2.5.0 or a higher version.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (1)

https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-9-php-object-injection-vulnerability?_s_id=cve
vdb-entry

Link	Providers	Tags
https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-9-php-object-injection-vulnerability?_s_id=cve		vdb-entry