CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.1.9.
Explanation of Vulnerability in Simple Terms
WPC Frequently Bought Together for WooCommerce versions up to 7.1.9 lack proper authorization checks on certain functions. A logged-in user with low privileges can read or modify data they should not have access to. Update to a version newer than 7.1.9 to resolve this issue.
What an attacker can do
Read or modify WooCommerce data without proper authorization as a low-privilege user.
Potential impact on your site
Unauthorized users can access or alter product recommendations and related WooCommerce settings.
Conditions required to exploit
Attacker must have a valid WordPress user account with low privileges (e.g., subscriber or customer role).
Key dates
External resources
Related vulnerabilities
