Medium · 4.3 CVE-2024-24711 EUVD-2024-22110GHSA-2c59-9ffj-f3h3

WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability

Published Mar 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wedevs Product: WooCommerce Conversion Tracking Category: Web / CMS

Description

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11.

Affected products

Vendor	Product	Affected	Fixed
weDevs	WooCommerce Conversion Tracking	≤ 2.0.11	—

References

https://patchstack.com/database/vulnerability/woocommerce-conversion-tracking/wordpress-woocommerce-conversion-tracking-plugin-2-0-11-broken-access-control-csrf-vulnerability?_s_id=cve vdb-entry