CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient validation of the user-controlled key on the lock_unlock_terawallet AJAX action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to lock/unlock other users wallets.
Explanation of Vulnerability in Simple Terms
Wallet for WooCommerce versions up to 1.4.3 contain an authorization flaw that allows authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter wallet-related information through the application. The vulnerability requires an active user account but no additional user interaction.
What an attacker can do
Modify wallet data or settings belonging to other users or the site.
Potential impact on your site
Users' wallet balances, transactions, or payment settings could be altered by other authenticated users.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
