CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Premmerce Premmerce Product Filter for WooCommerce premmerce-woocommerce-product-filter.This issue affects Premmerce Product Filter for WooCommerce: from n/a through <= 3.7.2.
Explanation of Vulnerability in Simple Terms
The Premmerce Product Filter for WooCommerce plugin through version 3.7.2 lacks proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify plugin settings or data without proper permission validation. This affects the integrity of filter configurations and site settings.
What an attacker can do
Modify plugin settings or filter configurations without proper authorization.
Potential impact on your site
Unauthorized users can alter product filter behavior, potentially disrupting customer experience or exposing unintended product data.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., subscriber or customer) on the site.
Key dates
External resources
Related vulnerabilities
