CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The WooMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'template_delete_saved' function in all versions up to, and including, 3.0.34. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject SQL into an existing post deletion query.
Explanation of Vulnerability in Simple Terms
WooMail versions up to 3.0.34 lack proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify email settings or templates without proper permission validation. The vulnerability requires an active WordPress user account but does not require administrator access. Site owners should update to a version newer than 3.0.34.
What an attacker can do
Modify WooCommerce email templates or settings without proper authorization.
Potential impact on your site
Unauthorized users could alter transactional emails, potentially disrupting customer communications or injecting malicious content.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
