CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
What the vulnerability does
Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce: from n/a through <= 2.8.6.
Explanation of Vulnerability in Simple Terms
Stock Locations for WooCommerce versions up to 2.8.6 lack proper authorization checks, allowing authenticated users with low privileges to modify site data and disrupt service availability. An attacker with a basic user account can alter inventory locations and cause the site to become unavailable. Update to a version newer than 2.8.6.
What an attacker can do
Modify inventory data and make the site unavailable.
Potential impact on your site
Inventory data can be corrupted and the site may become inaccessible to customers.
Conditions required to exploit
Attacker needs a low-privilege user account (e.g., customer or subscriber role).
Key dates
External resources
Related vulnerabilities
