CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Saleswonder Team: Tobias Get Better Reviews for WooCommerce more-better-reviews-for-woocommerce.This issue affects Get Better Reviews for WooCommerce: from n/a through <= 4.0.6.
Explanation of Vulnerability in Simple Terms
The Get Better Reviews for WooCommerce plugin through version 4.0.6 lacks proper authorization checks on certain functions. An authenticated user with low privileges can modify review data or settings they should not have access to. The vulnerability requires a valid WordPress account but does not affect site availability or expose sensitive data.
What an attacker can do
Modify reviews or plugin settings without proper authorization.
Potential impact on your site
Unauthorized users can alter reviews, potentially damaging site reputation or manipulating customer feedback.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
