CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Slider for WooCommerce: from n/a through <= 1.13.61.
Explanation of Vulnerability in Simple Terms
Product Slider for WooCommerce versions up to 1.13.61 lack proper authorization checks, allowing authenticated users with low privileges to read sensitive data they should not access. An attacker with a basic user account can retrieve confidential information without needing to interact with the site or perform additional actions. Site administrators should update to a version newer than 1.13.61 to restrict unauthorized data access.
What an attacker can do
Read sensitive data they should not have access to.
Potential impact on your site
Confidential information may be exposed to any registered user, including customer or business data.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
