CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 1.0.6.1. This makes it possible for subscribers and higher to execute functions intended for admin use.
Explanation of Vulnerability in Simple Terms
The Active Products Tables for WooCommerce plugin through version 1.0.6.1 does not properly check user permissions before allowing modifications to product table data. A logged-in user with low privileges can alter product information without authorization. The vulnerability requires an active WordPress account but no special access level.
What an attacker can do
Modify product table data without proper authorization.
Potential impact on your site
Unauthorized users can alter product information, potentially corrupting product data or pricing.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
