CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Print Barcode Labels for your WooCommerce products/orders a4-barcode-generator.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through <= 3.4.10.
Explanation of Vulnerability in Simple Terms
The Print Barcode Labels for WooCommerce plugin through version 3.4.10 lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify data they should not have access to, such as barcode label settings or order information. The vulnerability requires an active user account but no special permissions. Site owners should update to a version newer than 3.4.10 as soon as available.
What an attacker can do
A logged-in user can modify barcode label settings or order data they lack permission to change.
Potential impact on your site
Unauthorized users can alter barcode labels and related order data, potentially disrupting fulfillment or inventory tracking.
Conditions required to exploit
Attacker must have a valid user account on the site with at least low-level privileges.
Key dates
External resources
Related vulnerabilities
