CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Privilege Escalation.This issue affects Custom Fields Account Registration For Woocommerce: from n/a through <= 1.2.
Explanation of Vulnerability in Simple Terms
Custom Fields Account Registration For WooCommerce versions 1.2 and earlier contain a privilege escalation vulnerability. An authenticated administrator can read sensitive data, modify site content, and disrupt service. The vulnerability requires high-level admin access to exploit and does not affect the confidentiality or integrity of data outside the admin scope.
What an attacker can do
Read sensitive data, modify site content, and disrupt service if they have admin access.
Potential impact on your site
Compromised admin accounts can access all site data and modify critical WooCommerce settings.
Conditions required to exploit
Attacker must have administrator-level privileges on the WooCommerce site.
Key dates
External resources
