PT-2024-36269 · Unknown · Woocommerce Pdf Vouchers

Bonds · Published 2024-12-18 · Updated 2026-01-28 · CVE-2024-54383

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Vouchers versions prior to 4.9.9

Description An incorrect privilege assignment exists in wpweb WooCommerce PDF Vouchers, allowing for privilege escalation. The issue allows an attacker to gain elevated privileges within the system.

Recommendations Update WooCommerce PDF Vouchers to version 4.9.9 or later.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-54383

Affected Products

Woocommerce Pdf Vouchers

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-54383 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54383 · Vendor Advisory
• https://t.me/cvedetector/13235 · Telegram Post
• https://twitter.com/CVEnew/status/1869460730120180045 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/woocommerce-pdf-vouchers/vulnerability/wordpress-woocommerce-pdf-vouchers-plugin-4-9-9-broken-authentication-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/woocommerce-pdf-vouchers/vulnerability/wordpress-woocommerce-pdf-vouchers-plugin-4-9-9-broken-authentication-vulnerability?_s_id=cve · Note
• https://t.me/cveNotify/150156 · Telegram Post