WooCommerce Product Vendors < 2.2.2 - Missing Authorization

2024-01-0400:00:00

wpscan.com

wordpress

plugin

vulnerability

unauthorized access

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The WooCommerce Product Vendors plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.