Woocommerce Ups Shipping

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:octolize:woocommerce_ups_shipping:*:*:*:*:free:wordpress:*:*

part: a version: * update: *

VendorOctolize (33b548bf-e64f-5bee-89da-3881011b5b79)
ProductWoocommerce Ups Shipping (3f7b736e-7043-5ae8-baf0-b8d3d8c116f3)
Edition*
Language*
Software editionfree
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9109 vulnerable 2026-06-08 07:00:26.670524 UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
MEDIUM (4.3)
The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_oauth_data function in all versions up to, and including, 2.3.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin's API key.
Published: 2024-10-25T05:35:28.347Z
Updated: 2026-04-08T16:58:41.506Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.