CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through <= 2.0.4.
Explanation of Vulnerability in Simple Terms
Barcode Generator for WooCommerce versions 2.0.4 and earlier lack proper authorization checks, allowing unauthenticated attackers to disrupt the plugin's availability. An attacker can send network requests without authentication to trigger a denial-of-service condition. Site administrators should update to a version newer than 2.0.4 as soon as available.
What an attacker can do
Make the barcode generator unavailable or unresponsive without needing to log in.
Potential impact on your site
Your barcode generation feature may become unavailable, disrupting WooCommerce operations that depend on it.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
