CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9.
Explanation of Vulnerability in Simple Terms
The Print Barcode Labels for WooCommerce plugin through version 3.4.9 fails to properly check user permissions before allowing access to sensitive barcode and order data. A logged-in user with low privileges can read barcode labels and order information they should not have access to. Update to a version newer than 3.4.9.
What an attacker can do
Read barcode labels and order data belonging to other users or orders.
Potential impact on your site
Customer order and barcode data may be exposed to other logged-in users with lower privilege levels.
Conditions required to exploit
Attacker must have a low-privilege account on the WooCommerce site (e.g., customer or subscriber role).
Key dates
External resources
Related vulnerabilities
