CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Marco Almeida | Webdados Taxonomy/Term and Role based Discounts for WooCommerce taxonomy-discounts-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxonomy/Term and Role based Discounts for WooCommerce: from n/a through <= 5.1.
Explanation of Vulnerability in Simple Terms
The Taxonomy/Term and Role based Discounts for WooCommerce plugin through version 5.1 lacks proper authorization checks on certain functions. An attacker can trigger a denial-of-service condition by making a user visit a malicious link. The plugin does not verify user permissions before processing requests, allowing unauthorized actions.
What an attacker can do
Make the site temporarily unavailable by triggering resource exhaustion through a malicious link.
Potential impact on your site
Your WooCommerce site may become unresponsive if users are tricked into visiting attacker-controlled pages.
Conditions required to exploit
The victim must click a link or visit a page controlled by the attacker; no authentication required.
Key dates
External resources
Related vulnerabilities
