Skip to content
OpenAdvisories

Vendor

railmedia

2 known vulnerabilities.

Products

Order Tip for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-1119

    Order Tip for WooCommerce <= 1.3.1 - Missing Authorization to Unauthenticated Data Export

    The Order Tip for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_tips_to_csv() function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated atta…

    railmedia Order Tip for WooCommerce Web / CMS