CVE-2024-33944: Kestrel Woocommerce Aweber Newsletter Subscription

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2.

Affected products

• Kestrel Woocommerce Aweber Newsletter Subscription: up to and including 4.0.2
• Kestrel Woocommerce Awber Newsletter Subscription

Published 2024-05-02. Last modified 2026-06-17.