Lucene search

K
wpvulndbWpvulndbWPVDB-ID:62493E55-B29A-464E-8802-0707B388BF88
HistoryJan 04, 2024 - 12:00 a.m.

WooCommerce Product Vendors < 2.2.3 - Missing Authorization

2024-01-0400:00:00
wpscan.com
5
wordpress
product vendors
unauthorized access

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The WooCommerce Product Vendors plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CPENameOperatorVersion
eq2.2.3

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:62493E55-B29A-464E-8802-0707B388BF88