Skip to content
OpenAdvisories

Vendor

octolize

5 known vulnerabilities.

Products

USPS Shipping for WooCommerce – Live Rates 2 Flexible Shipping 1 Shipping Live Rates and Access Points for UPS for WooCommerce 1 WooCommerce UPS Shipping – Live Rates and Access Points 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-9109

    UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset

    The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up to, and including, 2.3.12. This makes it…

    octolize Shipping Live Rates and Access Points for UPS for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-32811

    WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability

    Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.4.

    octolize USPS Shipping for WooCommerce – Live Rates Web / CMS
  • Medium 4.3
    CVE-2024-32828

    WordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15.

    octolize Flexible Shipping
  • Medium 4.3
    CVE-2024-31943

    WordPress USPS Shipping for WooCommerce plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.2.

    octolize USPS Shipping for WooCommerce – Live Rates Web / CMS
  • Medium 4.3
    CVE-2024-31944

    WordPress WooCommerce UPS Shipping plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4.

    octolize WooCommerce UPS Shipping – Live Rates and Access Points Web / CMS