CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2.
Explanation of Vulnerability in Simple Terms
The Product Catalog Enquiry for WooCommerce plugin through version 5.0.2 lacks proper authorization checks on certain operations. An authenticated user with low privileges can modify or delete data they should not have access to. The vulnerability affects data integrity and availability but does not expose sensitive information.
What an attacker can do
Modify or delete catalog data and enquiries without proper authorization.
Potential impact on your site
Unauthorized users can corrupt or remove product catalog enquiries and related data.
Conditions required to exploit
Attacker must have a low-privilege account on the WooCommerce site.
Key dates
External resources
Related vulnerabilities
