CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1.
Explanation of Vulnerability in Simple Terms
Woocommerce Wholesale Lead Capture versions 2.0.3.1 and earlier contain a critical vulnerability allowing unauthenticated attackers to read sensitive data, modify site content, or disrupt service. No special conditions are required to exploit this flaw. All sites running affected versions require immediate patching.
What an attacker can do
Read sensitive data, modify site content, or disrupt service without authentication.
Potential impact on your site
Attackers can steal customer data, alter product listings, or take the store offline without warning.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
