CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through <= 1.01.5.
Explanation of Vulnerability in Simple Terms
ReviewShort, a WooCommerce review shortcode builder plugin, lacks proper authorization checks on certain functions. An unauthenticated attacker can modify review data without permission. The vulnerability affects all versions up to 1.01.5. Site owners should update to a version newer than 1.01.5 when available.
What an attacker can do
Modify WooCommerce review data without authentication or authorization.
Potential impact on your site
Review content on your site can be altered or corrupted by unauthorized parties.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
