CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Free Woocommerce Product Table View: from n/a through <= 1.78.
Explanation of Vulnerability in Simple Terms
Free Woocommerce Product Table View versions 1.78 and earlier lack proper authorization checks, allowing authenticated users with low privileges to disrupt site availability. An attacker can trigger a denial-of-service condition by making repeated requests that consume server resources. The vulnerability requires a valid user account but no special interaction from victims.
What an attacker can do
Authenticated user can make requests that crash or slow down the site, preventing legitimate visitors from accessing it.
Potential impact on your site
Site may become unavailable or slow during an attack; legitimate users cannot access the store.
Conditions required to exploit
Attacker must have a valid user account on the site (low privilege level sufficient).
Key dates
External resources
