CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
What the vulnerability does
Deserialization of Untrusted Data vulnerability in wpxpo ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks.This issue affects ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks: from n/a through 3.1.4.
Explanation of Vulnerability in Simple Terms
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks versions up to 3.1.4 contain a deserialization vulnerability that allows unauthenticated attackers to read sensitive data and modify site content. The vulnerability requires specific network conditions but does not require user interaction. Site administrators should update to a version newer than 3.1.4 immediately.
What an attacker can do
Read sensitive data and modify site content without authentication.
Potential impact on your site
Attackers can steal data and alter your site's content without logging in.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
