Advanced Local Pickup for WooCommerce vulnerabilities

2 known vulnerabilities in Advanced Local Pickup for WooCommerce from Zorem. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Advanced Local Pickup for WooCommerce: Missing Authorization

  CVE-2024-31283Jun 9, 2024Zorem

  Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.

• 7.2 High severity

  Zorem Local Pickup: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-2841Nov 22, 2023Zorem

  The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation