CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Product Fields (Product Addons) for WooCommerce: from n/a through <= 1.6.18.
Explanation of Vulnerability in Simple Terms
The Advanced Product Fields plugin for WooCommerce versions 1.6.18 and earlier lack proper authorization checks on certain operations. An unauthenticated attacker can modify product field data without permission. This affects the integrity of product information stored in WooCommerce sites using this plugin.
What an attacker can do
Modify product field data without authentication or authorization.
Potential impact on your site
Product field data can be altered by unauthorized users, potentially corrupting product listings and customer information.
Conditions required to exploit
Network access to the site; no authentication required.
Key dates
External resources
Related vulnerabilities
