Beveiligingsadvies

CVE-2024-7032

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-21 05:30:22
Laatst bijgewerkt 2026-04-08 17:11:03
Toegewezen door Wordfence
CVSS-score 6.5
Status PUBLISHED

Beschrijving

The Smart Online Order for Clover plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'moo_deactivateAndClean' function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to deactivate the plugin and drop all plugin tables from the database.