CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce: from n/a through <= 1.3.5.
Explanation of Vulnerability in Simple Terms
The Calculate Prices based on Distance For WooCommerce plugin through version 1.3.5 lacks proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify plugin settings or data without proper permission validation, potentially affecting site pricing calculations or configuration.
What an attacker can do
Modify plugin settings or pricing data without proper authorization.
Potential impact on your site
Unauthorized users could alter distance-based pricing rules, disrupting WooCommerce pricing logic and potentially causing revenue loss.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., subscriber or customer) on the site.
Key dates
External resources
Related vulnerabilities
