CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Hermann LAHAMI Allada T-shirt Designer for Woocommerce allada-tshirt-designer-for-woocommerce.This issue affects Allada T-shirt Designer for Woocommerce: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
The Allada T-shirt Designer for WooCommerce plugin versions 1.1 and earlier lack proper authorization checks. An unauthenticated attacker can modify data through the plugin without permission. The vulnerability requires no user interaction and is remotely exploitable over the network.
What an attacker can do
Modify plugin data without authentication or authorization.
Potential impact on your site
Attackers can alter T-shirt designs, pricing, or other plugin-managed data without logging in.
Conditions required to exploit
Network access to the WooCommerce site; no authentication required.
Key dates
External resources
Related vulnerabilities
