Approved changes feed: RSS · Atom

cpe:2.3:a:webcodingplace:product_expiry_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebcodingplace (b8f16936-21d7-5fd0-9466-fb9ea634386d)
ProductProduct Expiry For Woocommerce (39164546-b946-5d24-93ff-90ebe9d10060)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/webcodingplace/product-expiry-for-woocommerce purl2cpe 2026-06-01 10:11:07.676338

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0201 vulnerable 2026-06-08 06:22:00.004947 Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
MEDIUM (5.4)
The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_settings' function in versions up to, and including, 2.5. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings. CVE-2023-52179 appears to be a duplicate of this issue.
Published: 2024-01-03T09:31:51.694Z
Updated: 2026-04-08T17:20:31.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52179 vulnerable 2026-06-08 06:17:54.397033 WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5.
Published: 2024-06-11T10:40:56.641Z
Updated: 2026-04-28T16:09:05.739Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.