Security Advisory

CVE-2024-12266

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-24 04:22:43

Last updated 2026-04-08 16:33:40

Assigner Wordfence

State PUBLISHED

Description

The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elex_dp_export_rules() and elex_dp_import_rules() functions in all versions up to, and including, 2.1.7. This makes it possible for unauthenticated attackers to import and export product rules along with obtaining phpinfo() data

← Browse all CVEs View on cve.org ↗