CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry ni-woocommerce-product-enquiry allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ni WooCommerce Product Enquiry: from n/a through <= 4.1.8.
Explanation of Vulnerability in Simple Terms
The Ni WooCommerce Product Enquiry plugin through version 4.1.8 lacks proper authorization checks on certain functions. An unauthenticated attacker can modify product enquiry data or settings without permission. This affects all installations of the plugin up to and including version 4.1.8. Site owners should update immediately to a version newer than 4.1.8.
What an attacker can do
Modify or tamper with product enquiry data and plugin settings without logging in.
Potential impact on your site
Product enquiries and plugin configuration can be altered by anyone on the internet without your knowledge.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
