CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in a3rev Software WooCommerce Predictive Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Predictive Search: from n/a through 5.8.0.
Explanation of Vulnerability in Simple Terms
WooCommerce Predictive Search through version 5.8.0 lacks proper authorization checks on certain functions. An attacker without authentication can modify data on the site by sending crafted requests. The vulnerability does not expose sensitive information or disrupt availability, but allows unauthorized changes to site content or settings.
What an attacker can do
Modify site data without authentication by sending network requests to unprotected functions.
Potential impact on your site
Unauthorized changes to site content, settings, or WooCommerce data without admin approval or audit trail.
Conditions required to exploit
No authentication or user interaction required; attacker needs only network access to the site.
Key dates
External resources
Related vulnerabilities
