← All advisories

Critical severity10.0NVD Advisory· Published Apr 29, 2024· Updated Apr 28, 2026

CVE-2024-33566

CVE-2024-33566

Description

Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Admin And Client Message After Order For Woocommerceinferred
Range: <=12.4
Package: https://wordpress.org/plugins/admin-and-client-message-after-order-for-woocommerce
WordPress/OrderConvollm-create
Range: <=12.4

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/admin-and-client-message-after-order-for-woocommerce/wordpress-orderconvo-plugin-12-4-unauthenticated-api-access-to-arbitrary-file-upload-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.