Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3E6DB790-63BF-47DA-92C2-F75C2478DA54
HistoryJan 15, 2024 - 12:00 a.m.

MailerLite – WooCommerce integration < 2.0.9 - Missing Authorization via Multiple Functions

2024-01-1500:00:00
wpscan.com
5
mailerlite
wordpress
plugin
vulnerability
unauthorized access

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The MailerLite – WooCommerce integration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple functions in versions up to, and including, 2.0.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions.

CPENameOperatorVersion
eq2.0.9

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:3E6DB790-63BF-47DA-92C2-F75C2478DA54