What is CVE-2024-2384?

CVE-2024-2384 is a medium-severity vulnerability in Kilbot Wcpos – Point Of Sale (Pos) Plugin For Woocommerce, classified under Insufficient Verification of Data Authenticity. CVSS score: 4.3/10. Published 2024-03-20.

How severe is CVE-2024-2384?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Is CVE-2024-2384 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Kilbot Wcpos – Point Of Sale (Pos) Plugin For Woocommerce

CVE-2024-2384

The WooCommerce POS plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.4.11. This is due to the plugin not properly verifying the authentication and authorization of the current user This m…

EPSS: 0.003 (18.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Kilbot Wcpos – Point Of Sale (Pos) Plugin For Woocommerce — versions 0

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2024-2384?: CVE-2024-2384 is a medium-severity vulnerability in Kilbot Wcpos – Point Of Sale (Pos) Plugin For Woocommerce, classified under Insufficient Verification of Data Authenticity. CVSS score: 4.3/10. Published 2024-03-20.
How severe is CVE-2024-2384?: Medium severity. CVSS v3 base score is 4.3 out of 10.
Is CVE-2024-2384 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.