Lucene search
WpvulndbWPVDB-ID:AE15F7FF-3C3F-4531-A042-AEC85F4A50C7HistoryFeb 27, 2023 - 12:00 a.m.
Wholesale Suite < 2.1.5.1 - Subscriber+ Missing Authorization for Plugin Settings Change
2023-02-2700:00:00
wpscan.com
3
wholesale suite
plugin settings
authorization
users
subscriber role
security vulnerability
0.001 Low
EPSS
Percentile
19.4%
The plugin does not adequately authorize settings changes, allowing users with a role as low as Subscriber to update plugin settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce-wholesale-prices | lt | 2.1.5.1 |
Related
cvelist
cvelist
nvd
nvd
CVE-2022-34344
2024-01-08 22:15:44
cve
cve
CVE-2022-34344
2024-01-08 22:15:44
prion
prion
Authorization
2024-01-08 22:15:00
wordfence
wordfence