CVE-2024-38699

Summary

CVE-2024-38699 is a new vulnerability affecting the WP Swings Wallet System for WooCommerce. The issue involves a missing authorization feature, enabling unauthorized users to access functionality that should be restricted by Access Control Lists (ACLs). The vulnerability affects installations of the WP Swings Wallet System for WooCommerce from version n/a through 2.5.13. Successful exploitation could result in significant security implications. It is recommended that users upgrade to the latest version of the plugin as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.