CVE-2024-43131

7.5 HIGH

Published: August 13, 2024 Modified: January 28, 2026

Description

Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://patchstack.com/database/vulnerability/woocommerce-collections/wordpress-docket-woocommerce-collections-wishlist-watchlist-plugin-1-6-6-unauthenticated-arbitrary-post-page-deletion-vulnerability?_s_id=cve

Source: audit@patchstack.com

Third Party Advisory

1 reference(s) from NVD

Quick Stats

CVSS v3 Score

7.5 / 10.0

EPSS (Exploit Probability)

0.4%

58th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-863

Affected Vendors

wpwebelite

Related CVEs

CVE-2026-4595 2.4

CVE-2026-33723 7.1

CVE-2026-33719 8.6

CVE-2026-33717 8.8

CVE-2026-33716 9.4