CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Dotstore Minimum and Maximum Quantity for WooCommerce min-and-max-quantity-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimum and Maximum Quantity for WooCommerce: from n/a through <= 2.0.0.
Explanation of Vulnerability in Simple Terms
The Minimum and Maximum Quantity for WooCommerce plugin through version 2.0.0 lacks proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify product quantity settings without proper permission validation. This allows unauthorized changes to store configuration that should be restricted to administrators.
What an attacker can do
Modify product minimum and maximum quantity settings without proper authorization.
Potential impact on your site
Unauthorized users can alter product quantity restrictions, disrupting sales logic and potentially causing inventory or order processing issues.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., customer or contributor role) on the WooCommerce site.
Key dates
External resources
Related vulnerabilities
