Skip to content
OpenAdvisories

Vendor

inspirelabs

1 known vulnerabilities.

Products

InPost for WooCommerce 1 InPost PL 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2024-6500

    InPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete

    The InPost for WooCommerce plugin and InPost PL plugin for WordPress are vulnerable to unauthorized access and deletion of data due to a missing capability check on the 'parse_request' function in all versions up to, and including, 1.4.0 (for InPost for WooCo…

    inspirelabs InPost for WooCommerce InPost PL Web / CMS