5.3 Medium

CVE-2024-52395 Missing Authorization vulnerability in QuantumCloud Floating Buttons for WooCommerce…

Description

Missing Authorization vulnerability in QuantumCloud Floating Buttons for WooCommerce shop-assistant-for-woocommerce-jarvis allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Floating Buttons for WooCommerce: from n/a through <= 2.8.8.

Affected products and versions

Product	Affected versions	Fixed in
Floating Buttons for WooCommerce 2.8	earliest → 2.8.8	No fix stated
floating_buttons 2.8	earliest → 2.8.8	No fix stated
Floating Buttons for WooCommerce 2.8	earliest → 2.8.8	No fix stated

Do you use Floating Buttons for WooCommerce?

Track this CVE Watch Floating Buttons for WooCommerce Check my SBOMs

www.cveye.io/en/cve/CVE-2024-52395

Timeline

Published November 19, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE