CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Dotstore Product Size Charts Plugin for WooCommerce woo-advanced-product-size-chart.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through <= 2.4.5.
Explanation of Vulnerability in Simple Terms
The Product Size Charts Plugin for WooCommerce through version 2.4.5 lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify size chart data without proper permission validation. This allows unauthorized changes to product information visible to customers.
What an attacker can do
Modify size chart data for WooCommerce products without proper authorization.
Potential impact on your site
Customers may see incorrect or malicious product size information, damaging trust and causing order issues.
Conditions required to exploit
Attacker must have a low-privilege account (e.g., subscriber or customer) on the WordPress site.
Key dates
External resources
Related vulnerabilities
