CVE-2024-10813 Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure
Unauthenticated attackers can expose sensitive data via the var_dump_table parameter in the Product Table for WooCommerce plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10813?
CVE-2024-10813 is a medium-severity vulnerability in codersaiful Product Table for WooCommerce, published on 23 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1 via the var_dump_table parameter. This makes it possible for unauthenticated attackers var data.
Weakness: CWE-862
Which versions are affected by CVE-2024-10813?
It affects 1 product.
Products include Codeastrology Woo Product Table.
How do I fix CVE-2024-10813?
No fix has been published for CVE-2024-10813 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-10813 being exploited?
There is no known exploitation of CVE-2024-10813 in the wild and no public exploit code.
Other vulnerabilities in codersaiful Product Table for WooCommerce
Sources
Also known as GHSA-c22h-rp8f-34cr.