What the vulnerability does
01Description
The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to account takeover and privilege escalation in all versions up to, and including, 1.2.8. This is due to the 'generate_key' function not producing a sufficiently random value. This makes it possible for authenticated attackers, with Subscriber-level access and above, to log in as site administrators, granted they have triggered the ajax_login() function which generates a unique key that can be used to log in.
Explanation of Vulnerability in Simple Terms
02Summary
WPC Shop as a Customer for WooCommerce versions up to 1.2.8 contain a use of insufficiently random values vulnerability. An attacker can exploit weak randomness in the plugin's token or session generation to forge authentication credentials or bypass security controls. This affects confidentiality, integrity, and availability of the WooCommerce store. Update to a version newer than 1.2.8.
What an attacker can do
03Attacker Capabilities
Forge authentication tokens or session identifiers to impersonate users or bypass access controls.
Potential impact on your site
04Site Impact
Attackers can impersonate customers or administrators, modify orders, access sensitive data, or disrupt store operations.
Conditions required to exploit
05Prerequisites
Network access to the site; no authentication or user interaction required.
Key dates
06Disclosure timeline
December 18, 2024
CVE published
April 8, 2026
Record updated
