Medium severity4.3NVD Advisory· Published Jun 10, 2024· Updated Jun 17, 2026

CVE-2024-35727

Description

Missing Authorization vulnerability in actpro Extra Product Options for WooCommerce.This issue affects Extra Product Options for WooCommerce: from n/a through 3.0.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Actpro/Extra Product Options For Woocommerce2 versions
cpe:2.3:a:actpro:extra_product_options_for_woocommerce:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:actpro:extra_product_options_for_woocommerce:*:*:*:*:*:wordpress:*:*range: <3.0.7
- (no CPE)range: n/a
WordPress/Extra Product Options for WooCommercellm-fuzzy
Range: <=3.0.6

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/extra-product-options-for-woocommerce/wordpress-extra-product-options-for-woocommerce-plugin-3-0-6-broken-access-control-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000