Shipping Live Rates And Access Points For Ups For Woocommerce

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:octolize:shipping_live_rates_and_access_points_for_ups_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOctolize (33b548bf-e64f-5bee-89da-3881011b5b79)
ProductShipping Live Rates And Access Points For Ups For Woocommerce (0c69d7c3-26a9-5df5-ae42-f1c7b8f84d61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9109 vulnerable 2026-06-08 07:00:26.669755 UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
MEDIUM (4.3)
The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up to, and including, 2.3.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin's API key.
Published: 2024-10-25T05:35:28.347Z
Updated: 2026-04-08T16:58:41.506Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.