CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.4.0.
Explanation of Vulnerability in Simple Terms
Coupon Affiliates through version 6.4.0 lacks proper authorization checks, allowing unauthenticated attackers to modify data or disrupt service. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update to a version newer than 6.4.0 when available.
What an attacker can do
Modify coupon or affiliate data and disrupt service availability without authentication.
Potential impact on your site
Attackers can alter coupon terms, affiliate commissions, or disable the plugin's functionality without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
