cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-1562,https://securityvulnerability.io/vulnerability/CVE-2024-1562,Unauthorized Modification of Data in WooCommerce Google Sheet Connector Plugin,"The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the execute_post_data function in all versions up to, and including, 1.3.11. This makes it possible for unauthenticated attackers to update plugin settings.",Wordpress,WooCommerce Google Sheet Connector,5.3,MEDIUM,0.0004299999854993075,false,,false,false,false,,false,false,2024-02-21T03:36:00.767Z,0
CVE-2023-2329,https://securityvulnerability.io/vulnerability/CVE-2023-2329,WooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRF,"The WooCommerce Google Sheet Connector plugin for WordPress, prior to version 1.3.6, is susceptible to cross-site request forgery (CSRF) attacks. This vulnerability enables an attacker to exploit the lack of CSRF checks when updating the Access Code. By persuading a logged-in administrator to perform an action without their consent, attackers could change the access code to an arbitrary value, potentially compromising security and access controls.",Wordpress,WooCommerce Google Sheet Connector,8.8,HIGH,0.002300000051036477,false,,false,false,false,,false,false,2023-07-17T14:15:00.000Z,0