WooCommerce Warranty Requests < 2.3.0 - Missing Authorization

2024-01-0400:00:00

wpscan.com

woocommerce

warranty requests

wordpress

missing authorization

unauthorized access

vulnerability

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The WooCommerce Warranty Requests plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.