Approved changes feed: RSS · Atom

cpe:2.3:a:kkarpieszuk:wc_price_history:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKkarpieszuk (b7d31464-2ac8-53b7-ba57-73eedc5c8e6c)
ProductWc Price History (a0ab64af-5c0f-5d37-a4db-65b9f4cf2928)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12617 vulnerable 2026-06-08 06:25:35.658415 WC Price History for Omnibus <= 2.1.3 - Missing Authorization
MEDIUM (5.4)
The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and modify history data.
Published: 2024-12-24T04:22:45.832Z
Updated: 2026-04-08T17:16:39.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.