WooCommerce Conversion Tracking < 2.0.12 - Subscriber+ happy-elementor-addons Installation & Activation

2024-01-1200:00:00

wpscan.com

woocommerce

conversion tracking

subscriber

happy-elementor-addons

ajax

authorization

authenticated users

security

plugin

AI Score

9.3

Confidence

High

EPSS

Percentile

13.8%

JSON

Description The plugin does not have authorisation checks in some AJAX actions, which could allow any authenticated users, such as subscriber to install and activate the happy-elementor-addons addon plugin

References

patchstack.com/database/vulnerability/woocommerce-conversion-tracking/wordpress-woocommerce-conversion-tracking-plugin-2-0-11-broken-access-control-vulnerability