CVE-2024-9430
Missing Authentication for Critical Function (CWE-306)
Published: Oct 31, 2024 / Updated: 19d ago
010
CVSS 5.3EPSS 0.05%Medium
CVE info copied to clipboard
The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to download Quote PDF and CSV documents.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Timeline
First Article
Feedly found the first article mentioning CVE-2024-9430. See article
Oct 31, 2024 at 6:56 AM / Vulners.com RSS Feed
CVSS Estimate
Feedly estimated the CVSS score as MEDIUM
Oct 31, 2024 at 6:56 AM
CVE Assignment
NVD published the first details for CVE-2024-9430
Oct 31, 2024 at 7:15 AM
CVSS
A CVSS base score of 5.3 has been assigned.
Oct 31, 2024 at 7:20 AM / nvd
EPSS
EPSS Score was set to: 0.05% (Percentile: 18%)
Nov 1, 2024 at 9:55 AM
Affected Systems
Wordpress/wordpress
+null more
Attack Patterns
CAPEC-12: Choosing Message Identifier
+null more
News
CVE Alert: CVE-2024-9430 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-9430/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_9430
CVE Alert: CVE-2024-9430
Everyone that supports the site helps enable new functionality. Please refer to vendor documentation for updates.
null
- MEDIUM - CVE-2024-9430 The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to download Quote PDF and CSV documents.
Medium - CVE-2024-9430 - The Get Quote For Woocommerce – Request A Quote...
The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded...
cveNotify : 🚨 CVE-2024-9430The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to download Quote PDF and CSV documents.🎖@cveNotify
cveNotify : 🚨 CVE-2024-9430The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to download Quote PDF and CSV documents.🎖@cveNotify
See 5 more articles and social media posts