PatchTheCVEdigireturn vulnerabilities
Recent CVEs affecting digireturn products. 3 tracked.
digireturn has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-12-27. Highest priority: CVE-2024-3410 (score 27/100).
- CVE-2024-7690 MEDIUM 4.3 UPGRADE The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, whic
- CVE-2024-3410 MEDIUM 4.3 UPGRADE The DN Footer Contacts WordPress plugin before 1.6.3 does not sanitise and escape some of its settings, which
- CVE-2024-11842 MEDIUM 4.3 UPGRADE The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when u
FAQ
How do I fix digireturn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is digireturn being exploited right now?
None of the tracked digireturn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which digireturn CVE should I patch first?
CVE-2024-3410 currently ranks highest (27/100): The DN Footer Contacts WordPress plugin before 1.6.3 does not sanitise and escape some of its settings, which .