CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Octolize Shipping Plugins Cart Weight for WooCommerce woo-cart-weight allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cart Weight for WooCommerce: from n/a through <= 1.9.11.
Explanation of Vulnerability in Simple Terms
Cart Weight for WooCommerce versions up to 1.9.11 lack proper authorization checks, allowing unauthenticated attackers to modify cart weight data via network requests. The vulnerability does not expose sensitive information or disrupt site availability, but attackers can alter shipping calculations and related cart functionality. Site owners should update to a version newer than 1.9.11.
What an attacker can do
Modify cart weight data and shipping calculations without authentication.
Potential impact on your site
Attackers can manipulate shipping costs and weight-based cart logic, potentially affecting orders and revenue.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
