CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Membership For WooCommerce: from n/a through <= 3.0.3.
Explanation of Vulnerability in Simple Terms
Membership For WooCommerce versions 3.0.3 and earlier contain a denial-of-service vulnerability accessible over the network without authentication. An attacker can send specially crafted requests to make the site unavailable or unresponsive. No user interaction is required. Site administrators should update to a version newer than 3.0.3 as soon as possible.
What an attacker can do
Make the site unavailable or unresponsive by sending network requests.
Potential impact on your site
Your site may become slow or unavailable during an attack, affecting customer access and sales.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
