CVE-2024-4233 - Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares

Back Back to CVE browser

MEDIUM

Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares

Published May 8, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through 2.1.10; Arconix FAQ: from n/a through 1.9.3.

Affected products

Vendor Tyche Softwares Product Arconix FAQ Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=1.9.3
Vendor Tyche Softwares Product Arconix Shortcodes Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=2.1.10
Vendor Tyche Softwares Product Print Invoice & Delivery Notes for WooCommerce Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=4.8.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tyche Softwares

Arconix FAQ

unaffected

Version	Status	Constraints
-	affected	<=1.9.3

Tyche Softwares

Arconix Shortcodes

unaffected

Version	Status	Constraints
-	affected	<=2.1.10

Tyche Softwares

Print Invoice & Delivery Notes for WooCommerce

unaffected

Version	Status	Constraints
-	affected	<=4.8.1

Remediation

Vendor solution

Update Print Invoice & Delivery Notes for WooCommerce to 4.9.0 or a higher version.

Update Arconix Shortcodes to 2.1.11 or a higher version.

Update Arconix FAQ to 1.9.4 or a higher version.

Weaknesses (1)

CWE-862

Missing Authorization

References (4)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-32785		Advisory
https://patchstack.com/database/vulnerability/arconix-faq/wordpress-arconix-faq-plugin-1-9-3-broken-access-control-vulnerability?_s_id=cve		vdb-entry
https://patchstack.com/database/vulnerability/arconix-shortcodes/wordpress-arconix-shortcodes-plugin-2-1-10-broken-access-control-vulnerability?_s_id=cve		vdb-entry
https://patchstack.com/database/vulnerability/woocommerce-delivery-notes/wordpress-print-invoice-delivery-notes-for-woocommerce-plugin-4-8-1-broken-access-control-vulnerability?_s_id=cve		vdb-entry