Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Personalize Woocommerce Cart Page - Broken Access Control (CVE-2024-12826)
The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limited plugin settings.
PLUGIN
Personalize Woocommerce Cart Page
CVE-2024-12826
Risk Score
Threat Entry
Updated 2026-06-17
Personalize Woocommerce Cart Page - Cross-Site Request Forgery (CSRF) (CVE-2019-5979)
Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
PLUGIN
Personalize Woocommerce Cart Page
CVE-2019-5979
Risk Score