CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in ChoPlugins.com Custom PC Builder Lite for WooCommerce custom-pc-builder-lite-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom PC Builder Lite for WooCommerce: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Custom PC Builder Lite for WooCommerce versions up to 1.0.1 lack proper authorization checks on certain functions. An attacker can modify or delete data without authentication. The plugin does not verify user permissions before processing requests, allowing unauthorized changes to site content or functionality.
What an attacker can do
Modify or delete site data without logging in.
Potential impact on your site
Attackers can alter or remove product configurations and builder data without your knowledge or permission.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
