Product Expiry for WooCommerce < 2.6 - Subscriber+ Settings Update

2024-01-0300:00:00

wpscan.com

plugin

authorisation check

settings update

authenticated users

subscriber

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

Description The plugin does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them

References

www.wordfence.com/threat-intel/vulnerabilities/id/c4006612-770a-482f-a8c2-e62f607914a9