CVE-2024-24711

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
weDevs	WooCommerce Conversion Tracking	<= 2.0.11
wedevs	woocommerce_conversion_tracking	<= 2.0.11

References

Timeline

Published: Mar 26, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-247125.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login Word CVE-2024-247135.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Auto Listings Auto Listings – Car L CVE-2024-247147.2Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n CVE-2024-247156.5Improper Validation of Specified Quantity in Input vulnerability in The Events Calendar BookIt allows Manipulating Hidden Fields.This issue CVE-2024-247165.4Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.CVE-2024-247174.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds24 Online Booking all CVE-2024-247186.5Missing Authorization vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.6.CVE-2024-247194.3Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Check CVE-2024-24729.1The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability CVE-2024-247205.3An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user CVE-2024-247216.5An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack through CVE-2024-247229.1An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevat