CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Waiting List: from n/a through 2.13.0.
Explanation of Vulnerability in Simple Terms
The YITH WooCommerce Waiting List plugin through version 2.13.0 does not properly check user permissions before allowing certain actions. An attacker without authentication can modify data on the site by sending direct requests. The vulnerability affects the plugin's core functionality and requires no user interaction to exploit.
What an attacker can do
Modify data on the site without logging in or having permission to do so.
Potential impact on your site
Unauthorized changes to waiting list data or related WooCommerce information without admin approval.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
