CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Rextheme Change WooCommerce Add To Cart Button Text allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Change WooCommerce Add To Cart Button Text: from n/a through 1.3.
Explanation of Vulnerability in Simple Terms
The Change WooCommerce Add To Cart Button Text plugin for WordPress through version 1.3 does not properly check user permissions before allowing modifications to cart button text and related settings. A logged-in user with low privileges can alter these settings without authorization, potentially affecting site functionality and user experience. Update to a version newer than 1.3.
What an attacker can do
A low-privilege user can modify WooCommerce cart button text and settings without proper authorization.
Potential impact on your site
Unauthorized users can deface or alter critical WooCommerce cart interface text, disrupting customer experience.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
