← All advisories

High severity7.5NVD Advisory· Published Apr 10, 2024· Updated Apr 28, 2026

CVE-2024-31297

CVE-2024-31297

Description

Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0.

Affected products

2

Wpexperts/Wholesale For Woocommerce2 versions
cpe:2.3:a:wpexperts:wholesale_for_woocommerce:*:*:*:*:pro:wordpress:*:*+ 1 more
- cpe:2.3:a:wpexperts:wholesale_for_woocommerce:*:*:*:*:pro:wordpress:*:*range: <=2.3.0
- (no CPE)range: <=2.3.0

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woocommerce-wholesale-pricing/wordpress-wholesale-for-woocommerce-plugin-2-3-1-unauthenticated-arbitrary-post-page-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.