CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through <= 3.2.4.
Explanation of Vulnerability in Simple Terms
The Ultimate Gift Cards For WooCommerce plugin through version 3.2.4 lacks proper authorization checks, allowing unauthenticated attackers to modify gift card data via network requests. No user interaction is required. The vulnerability affects the integrity of gift card records but does not expose sensitive data or disrupt site availability.
What an attacker can do
Modify gift card records without authentication.
Potential impact on your site
Gift card data can be altered by unauthorized parties, potentially affecting sales and customer trust.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
