PatchTheCVEvanquish vulnerabilities
Recent CVEs affecting vanquish products. 11 tracked.
vanquish has 11 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-02-01. Highest priority: CVE-2024-11150 (score 57/100).
- CVE-2024-3983 HIGH 8.1 UPGRADE The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions,
- CVE-2024-2843 MEDIUM 6.5 UPGRADE The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which
- CVE-2024-1747 MEDIUM 6.5 UPGRADE The WooCommerce Customers Manager WordPress plugin before 30.2 does not have authorisation and CSRF in various
- CVE-2024-13775 MEDIUM 5.4 UPGRADE The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of da
- CVE-2024-13343 HIGH 8.8 UPGRADE The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing
- CVE-2024-11150 CRITICAL 9.8 UPGRADE The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insuffici
- CVE-2024-10820 CRITICAL 9.8 UPGRADE The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file
- CVE-2024-10800 HIGH 8.8 UPGRADE The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing ca
- CVE-2024-10627 CRITICAL 9.8 UPGRADE The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file uploads due to miss
- CVE-2024-10626 HIGH 8.8 UPGRADE The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to ins
- CVE-2024-10625 CRITICAL 9.8 UPGRADE The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to ins
FAQ
How do I fix vanquish vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vanquish being exploited right now?
None of the tracked vanquish CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vanquish CVE should I patch first?
CVE-2024-11150 currently ranks highest (57/100): The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insuffici.