The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the buy_one_click_import_options AJAX action in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import plugin settings.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Buy One Click Woocommerce Plugin | — | Update buy-one-click-woocommerce plugin to version 2.3.1, or a newer patched version | Oct 30, 2026 | Nov 12, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub