CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through <= 2.2.5.
Explanation of Vulnerability in Simple Terms
The WBW Currency Switcher for WooCommerce plugin through version 2.2.5 lacks proper authorization checks on certain functions. An unauthenticated attacker can read sensitive information by making direct requests to the plugin. The vulnerability affects all installations up to and including version 2.2.5.
What an attacker can do
Read sensitive site data without logging in.
Potential impact on your site
Attackers can access confidential information exposed by the plugin without needing an account.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
