Threat Entry Updated 2025-06-05

CVE-2024-1679 - Order Labels For Woocommerce Plugin

The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the template and javascript label fields in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Order Labels For Woocommerce

CVE-2024-1679

MEDIUM CVSS 6.4 2024-05-02

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-05

CVE-2024-1677 - Order Labels For Woocommerce Plugin

The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to an improper capability check on 42 separate AJAX functions in all versions up to, and including, 3.4.6. This makes it possible for authenticated attackers, with subscriber access and above, to fully control the plugin which includes the ability to modify plugin settings and profiles, and create, edit, retrieve, and delete templates and barcodes.

PLUGIN Order Labels For Woocommerce

CVE-2024-1677

MEDIUM CVSS 6.3 2024-05-02

Risk Score

Open Full Technical Breakdown