CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.8.0.
Explanation of Vulnerability in Simple Terms
SUMO Memberships for WooCommerce versions 7.8.0 and earlier contain an improper privilege escalation vulnerability. An authenticated user with low privileges can read sensitive data, modify site content, or disrupt service availability. The vulnerability requires network access and valid login credentials but no additional user interaction. Site administrators should update immediately to a patched version.
What an attacker can do
Read sensitive data, modify site content, or disrupt service availability with a low-privilege user account.
Potential impact on your site
Any registered user can compromise site data, alter membership settings, or cause downtime without admin intervention.
Conditions required to exploit
Valid login credentials with low-level user privileges; network access to the site.
Key dates
External resources
