CVE-2023-34376

MEDIUM

Rextheme Change WooCommerce Add To Cart Button Text <1.3 - RCE

Title source: llm

Description

Missing Authorization vulnerability in Rextheme Change WooCommerce Add To Cart Button Text allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Change WooCommerce Add To Cart Button Text: from n/a through 1.3.

References (2)

Core 2

Core References

Third Party Advisory vdb-entry

https://patchstack.com/database/wordpress/plugin/change-woocommerce-add-to-cart-button-text/vulnerability/wordpress-change-woocommerce-add-to-cart-button-text-plugin-1-3-broken-access-control?_s_id=cve

Vdb Entry vdb-entry

https://patchstack.com/database/Wordpress/Plugin/change-woocommerce-add-to-cart-button-text/vulnerability/wordpress-change-woocommerce-add-to-cart-button-text-plugin-1-3-broken-access-control?_s_id=cve

Scores

CVSS v3 5.4

EPSS 0.0052

EPSS Percentile 40.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-862

Status published

Products (2)

Rextheme/Change WooCommerce Add To Cart Button Text < 1.3

Sekander Badsha/Change WooCommerce Add To Cart Button Text < 1.3

Published Dec 13, 2024

Tracked Since Feb 18, 2026