CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Table Lite: from n/a through <= 3.9.5.
Explanation of Vulnerability in Simple Terms
WooCommerce Product Table Lite versions up to 3.9.5 lack proper authorization checks, allowing authenticated users with low privileges to modify product table data they should not have access to. The vulnerability requires a valid WordPress account but no special permissions. Site owners should update to a version newer than 3.9.5 to prevent unauthorized data changes.
What an attacker can do
Modify product table data without proper authorization.
Potential impact on your site
Unauthorized users can alter product information, pricing, or table configurations on your WooCommerce store.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
