CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serial Codes Generator and Validator with WooCommerce Support: from n/a through <= 2.8.2.
Explanation of Vulnerability in Simple Terms
The Serial Codes Generator and Validator with WooCommerce Support plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to modify or delete data they should not have access to. The vulnerability affects versions up to 2.8.2. An attacker with a basic user account can bypass permission checks to alter site content or functionality.
What an attacker can do
Modify or delete data without proper authorization using a low-privilege user account.
Potential impact on your site
Unauthorized users can alter or remove serial codes, product data, or other plugin-managed content.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
