CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0.
Explanation of Vulnerability in Simple Terms
Docket for WooCommerce contains an authorization flaw that allows unauthenticated attackers to disrupt the site's availability. The vulnerability stems from incorrect permission checks in the plugin's core functionality. An attacker can send network requests without authentication to trigger a denial-of-service condition. Update to version 1.7.0 or later to resolve this issue.
What an attacker can do
Make the site unavailable or unresponsive without needing to log in.
Potential impact on your site
Your WooCommerce site may become slow or inaccessible due to resource exhaustion attacks.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
