CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in vanquish WooCommerce Order Details woocommerce-order-details allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Order Details: from n/a through <= 3.1.
Explanation of Vulnerability in Simple Terms
WooCommerce Order Details versions 3.1 and earlier lack proper access controls, allowing unauthenticated attackers to read order information over the network. The vulnerability requires no user interaction and exposes sensitive order data. No integrity or availability impact is present. Update to a version newer than 3.1.
What an attacker can do
Read order details and sensitive customer information without authentication.
Potential impact on your site
Customer order data, including personal and payment information, is exposed to anyone on the internet.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
