CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The Order Splitter for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wos_troubleshooting' AJAX endpoint in all versions up to, and including, 5.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view information pertaining to other user's orders.
Explanation of Vulnerability in Simple Terms
The Order Splitter for WooCommerce plugin through version 5.3.5 fails to properly check user permissions before allowing access to sensitive functions. A logged-in user with low privileges can read data they should not have access to. Update to a version newer than 5.3.5.
What an attacker can do
Read sensitive order or configuration data without proper authorization.
Potential impact on your site
Customer or subscriber accounts can access confidential order information or plugin settings.
Conditions required to exploit
Attacker must have a low-privilege WooCommerce account (e.g., customer or subscriber).
Key dates
External resources
