CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through 3.1.
Explanation of Vulnerability in Simple Terms
The Checkout with Zelle on WooCommerce plugin through version 3.1 lacks proper authorization checks on certain functions. An unauthenticated attacker can modify data without permission. The plugin does not verify user privileges before allowing changes, creating an integrity risk for sites using this payment integration.
What an attacker can do
Modify data on the site without authentication or authorization.
Potential impact on your site
Attackers can alter checkout or payment-related data, potentially affecting orders or customer information.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
