Skip to content
OpenAdvisories

Vendor

ThemeFarmer

2 known vulnerabilities.

Products

WooCommerce Tools 1 Ultimate Subscribe 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-1689

    WooCommerce Tools <= 1.2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Module Deactivation

    The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to, and including, 1.2.9. This makes it possible for authentica…

    ThemeFarmer WooCommerce Tools Web / CMS