Approved changes feed: RSS · Atom

cpe:2.3:a:ukrsolution:print_labels_with_barcodes._create_price_tags,_product_labels,_order_labels_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUkrsolution (81556419-8097-5b0b-87f9-566ed776a411)
ProductPrint Labels With Barcodes. Create Price Tags, Product Labels, Order Labels For Woocommerce (c012890c-4c1f-5cc0-bc39-2a41229d09c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1679 vulnerable 2026-06-08 06:27:14.066812 Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Templates
MEDIUM (6.4)
The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the template and javascript label fields in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-05-02T16:52:35.334Z
Updated: 2026-04-08T17:20:15.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1677 vulnerable 2026-06-08 06:27:14.062956 Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Improper Authorization
MEDIUM (6.3)
The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to an improper capability check on 42 separate AJAX functions in all versions up to, and including, 3.4.6. This makes it possible for authenticated attackers, with subscriber access and above, to fully control the plugin which includes the ability to modify plugin settings and profiles, and create, edit, retrieve, and delete templates and barcodes.
Published: 2024-05-02T16:52:13.585Z
Updated: 2026-04-08T16:59:36.752Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.