CVE-2024-9927

HIGH

WooCommerce Order Proposal <= 2.0.5 - Authenticated Privilege Escalation via Order Proposal

Title source: llm

Description

The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to log in to WordPress as an arbitrary user account, including administrators.

References (2)

Core 2

Core References

Product

https://wpovernight.com/downloads/woocommerce-order-proposal/

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc993a4-6f65-4570-811c-13a80dbec064?source=cve

Scores

CVSS v3 7.2

EPSS 0.0045

EPSS Percentile 35.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-287

Status published

Products (2)

WP Overnight BV/WooCommerce Order Proposal < 2.0.5

wpovernight/woocommerce_order_proposal < 2.0.6

Published Oct 23, 2024

Tracked Since Feb 18, 2026