CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwc_woocommerce_order_created() function. This makes it possible for unauthenticated attackers to log in as other users based on their order ID, which can be an administrator if a site admin has placed a test order.
Explanation of Vulnerability in Simple Terms
Simpler Checkout versions 0.7.0 through 1.1.9 contain an authentication bypass vulnerability. An attacker can gain unauthorized access to the system without valid credentials. The vulnerability requires no user interaction and can be exploited remotely over the network. All affected installations should update immediately.
What an attacker can do
Gain full unauthorized access to the system without providing valid credentials.
Potential impact on your site
Attackers can read, modify, or delete data; compromise customer payment information; or disrupt checkout functionality.
Conditions required to exploit
Network access to the Simpler Checkout installation; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
