← All advisories

Medium severity6.5NVD Advisory· Published Mar 26, 2024· Updated Apr 28, 2026

CVE-2024-24799

CVE-2024-24799

Description

Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2.

Affected products

2

WooCommerce/Box Office
cpe:2.3:a:woocommerce:box_office:*:*:*:*:*:wordpress:*:*
Range: <1.2.3
Woo/WooCommerce Box Officellm-fuzzy
Range: <=1.2.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woocommerce-box-office/wordpress-woocommerce-box-office-plugin-1-2-2-broken-access-control-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.