CVE-2024-43131

Summary

CVE-2024-43131 is an Authorization vulnerability affecting WPWeb Docket, a plugin used for WooCommerce Collections, Wishlist, and Watchlist features. Before version 1.7.0, the plugin incorrectly enforces Access Control Lists (ACLs), allowing unauthorized users to gain access to functionality they should not be able to reach, potentially leading to security breaches. This issue poses a significant risk to WordPress websites using WPWeb Docket and highlights the importance of keeping plugins and components up to date to maintain security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.