Approved changes feed: RSS · Atom

cpe:2.3:a:zorem:advanced_local_pickup_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorZorem (87ce0d6c-931c-5f01-9de8-a7ba18e4a482)
ProductAdvanced Local Pickup For Woocommerce (f773fb6f-e496-557c-811f-160261303d2e)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zorem/advanced-local-pickup-for-woocommerce purl2cpe 2026-06-01 10:11:30.231795

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32814 vulnerable 2026-06-08 06:37:24.059183 WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.
Published: 2024-06-09T12:40:17.871Z
Updated: 2026-04-28T16:09:40.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31283 vulnerable 2026-06-08 06:35:31.237123 WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.
Published: 2024-06-09T18:12:25.487Z
Updated: 2026-04-28T16:09:29.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2841 vulnerable 2026-06-08 06:02:43.184627 Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
HIGH (7.2)
The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with admin-level privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2023-11-22T15:33:19.683Z
Updated: 2026-04-08T16:36:23.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40702 vulnerable 2026-06-08 05:48:27.954924 WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control
MEDIUM (5.4)
Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2.
Published: 2024-01-17T16:51:05.932Z
Updated: 2026-04-28T16:07:49.074Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.