CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mini Cart Drawer For WooCommerce: from n/a through 4.0.0.
Explanation of Vulnerability in Simple Terms
Mini Cart Drawer For WooCommerce versions up to 4.0.0 lack proper authorization checks, allowing an attacker to modify cart and checkout data. The vulnerability requires user interaction—typically clicking a malicious link—and does not expose sensitive information but can corrupt site functionality. Update to a version newer than 4.0.0.
What an attacker can do
Modify shopping cart contents or checkout data on the site via a crafted request.
Potential impact on your site
Customers' cart and checkout data can be altered, potentially disrupting orders or causing data inconsistency.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
