CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX action in all versions up to, and including, 2.2.57. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute and run arbitrary SQL commands.
Explanation of Vulnerability in Simple Terms
Site.pro for WooCommerce versions up to 2.2.57 lack proper authorization checks, allowing authenticated users with low privileges to perform actions they should not be able to. An attacker with a basic user account can read sensitive data, modify site content, or disrupt service. Update to a version newer than 2.2.57 immediately.
What an attacker can do
Read sensitive data, modify content, or disrupt the site using a low-privilege user account.
Potential impact on your site
Any registered user can access or modify data and functionality they should not have permission to use.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the WooCommerce site.
Key dates
External resources
Related vulnerabilities
