CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easyship WooCommerce Shipping Rates: from n/a through 0.9.0.
Explanation of Vulnerability in Simple Terms
The Easyship WooCommerce Shipping Rates plugin through version 0.9.0 lacks proper authorization checks on certain functions. An authenticated user with low privileges can modify shipping rates or other plugin settings they should not have access to. The vulnerability affects data integrity and availability but does not expose sensitive information.
What an attacker can do
Modify shipping rates or plugin settings without proper authorization.
Potential impact on your site
Unauthorized users can alter shipping rates, potentially disrupting orders or revenue.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the WordPress site.
Key dates
External resources
Related vulnerabilities
