Threat Entry Updated 2025-06-05

CVE-2024-1679 - A4 Barcode Generator Plugin

The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the template and javascript label fields in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN A4 Barcode Generator

CVE-2024-1679

MEDIUM CVSS 6.4 2024-05-02

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-05

CVE-2024-1677 - A4 Barcode Generator Plugin

The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to an improper capability check on 42 separate AJAX functions in all versions up to, and including, 3.4.6. This makes it possible for authenticated attackers, with subscriber access and above, to fully control the plugin which includes the ability to modify plugin settings and profiles, and create, edit, retrieve, and delete templates and barcodes.

PLUGIN A4 Barcode Generator

CVE-2024-1677

MEDIUM CVSS 6.3 2024-05-02

Risk Score

Open Full Technical Breakdown