One Click Order Re Order

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-5641 Jul 04, 08:15 MEDIUM PATCH This Month

The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress XSS Authentication Bypass One Click Order Re Order Wordpress Plugin +1

NVD

CVSS 3.1

6.4

EPSS

0.2%

CVE-2024-5641

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress XSS Authentication Bypass +3

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy