Unauthorized Access Vulnerability in Oliver POS Plugin for WordPress

CVE-2024-0702

What is CVE-2024-0702?

The Oliver POS plugin for WooCommerce, a widely used point of sale solution for WordPress, is vulnerable to unauthorized access due to insufficient capability checks in its AJAX functions. This flaw, located in the includes/class-pos-bridge-install.php file, allows authenticated attackers with subscriber-level access or higher to exploit several sensitive functionalities. Actions such as deactivating the plugin, disconnecting user subscriptions, and altering synchronization status can be executed without adequate permissions, potentially compromising overall plugin integrity and user trust.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References