CVE-2024-24719

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Checkout for WooCommerce: from n/a through 1.8.9.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Mar 26, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-24729.1The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability CVE-2024-247205.3An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a userCVE-2024-247216.5An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack throughCVE-2024-247229.1An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevatCVE-2024-247249.8Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution CVE-2024-247258.8Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modCVE-2024-24735.3The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due tCVE-2024-247318.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. AuthenticCVE-2024-247367.5The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issueCVE-2024-247396.3SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of priCVE-2024-24746.4The Standout Color Boxes and Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'color-button' shortCVE-2024-247405.3SAP NetWeaver Application Server (ABAP) - versions KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.93, KERNEL 7.94
CVE-2024-24719: Medium severity, CVSS 4.3 | Vulnix