Abandoned Cart Lite for WooCommerce < 5.16.1 - Improper Authorization via wcal_preview_emails

2024-01-2600:00:00

wpscan.com

vulnerable

unauthorized access

missing capability check

wcal_preview_emails

unauthenticated attackers

preview emails

obtain nonce

separate vulnerability

woocommerce

6.9 Medium

AI Score

Confidence

Low

JSON

Description The plugin is vulnerable to unauthorized access of data due to a missing capability check on the wcal_preview_emails function. This makes it possible for unauthenticated attackers to preview emails, granted they are able to obtain a nonce via a separate vulnerability.

CPENameOperatorVersion
eq5.16.1

CPE	Name	Operator	Version
		eq	5.16.1

References

www.wordfence.com/threat-intel/vulnerabilities/id/4edbfeee-b668-4a85-a030-c15d6583dc82

6.9 Medium

AI Score

Confidence

Low

JSON