CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic vagonic-sortable.This issue affects Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic: from n/a through <= 1.9.
Explanation of Vulnerability in Simple Terms
The Woocommerce Products Reorder Drag Drop Multiple Sort plugin for WordPress contains a missing authorization check that allows authenticated users with low privileges to modify product sort order without proper permission validation. An attacker with a basic user account can change the order of products in the store. The vulnerability affects versions 0 through 1.9. Update to a version newer than 1.9 when available.
What an attacker can do
Modify the sort order of WooCommerce products without proper authorization.
Potential impact on your site
Unauthorized users can rearrange your product listings, potentially disrupting customer experience and sales.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the WordPress site.
Key dates
External resources
Related vulnerabilities
