Laybuy Payment Extension for WooCommerce vulnerabilities

Product

Laybuy Payment Extension for WooCommerce

by Laybuy · last CVE Nov 1, 2024

CVEs

On KEV

5.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add Laybuy Payment Extension for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-21745	5.4	0%	Jan 8	WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS) Affected: through 5.3.9
CVE-2024-37203	4.3	0%	Nov 1	WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability Affected: through 5.3.9