Vulnerability Details CVE-2024-13511
The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settings_init() function, which processes a reset action based on specific query parameters in the URL. The related delete_settings() function performs a faulty nonce validation check, making the reset operation insecure and susceptible to unauthorized access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.7%
CVSS Severity
CVSS v3 Score 4.3
References
- https://plugins.trac.wordpress.org/browser/th-variation-swatches/tags/1.3.1/inc/thvs-settings.php
- https://plugins.trac.wordpress.org/changeset/3226822/th-variation-swatches/trunk/inc/thvs-settings.php
- https://www.wordfence.com/threat-intel/vulnerabilities/id/6c43b9b4-4394-428a-b381-d6a776fcd130?source=cve
Products affected by CVE-2024-13511
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.11
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.12
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.15
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.16
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.21
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.25
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.26
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.27
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.29
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.30
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.32
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.33
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.35
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.36
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.38
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.40
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.42
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.44
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.47
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.50
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.52
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.54
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.56
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.59
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.60
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.62
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.63
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.65
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.66
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.67
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.69
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.71
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.72
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.73
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.74
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.76
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.77
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.78
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.84
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.85
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.9
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.0
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.1
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.13
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.15
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.17
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.19
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.2
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.3
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.51
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.52
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.53
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.54
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.55
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.55.1
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.55.2
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.8