Octolize
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| USPS Shipping for WooCommerce – Live Rates | 2 | – | Jun 9, 2024 |
| Flexible Shipping | 1 | – | Apr 26, 2024 |
| Shipping Live Rates and Access Points for UPS for WooCommerce | 1 | – | Oct 25, 2024 |
| WooCommerce UPS Shipping – Live Rates and Access Points | 1 | – | Apr 10, 2024 |
Exploited and recent CVEs
- CVE-2024-9109 UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset 0.4%
- CVE-2024-32811 WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability 0.4%
- CVE-2024-32828 WordPress Table Rate Shipping Method for WooCommerce by Flexible Shipping plugin <= 4.24.15 - Broken Access Control vulnerability 0.3%
- CVE-2024-31943 WordPress USPS Shipping for WooCommerce plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-31944 WordPress WooCommerce UPS Shipping plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%