CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.2.1.
Explanation of Vulnerability in Simple Terms
The LTL Freight Quotes plugin for WooCommerce fails to properly check user permissions before allowing certain actions. An attacker without authentication can modify data through the plugin's functions. The vulnerability affects versions up to 5.2.1. Update to a version newer than 5.2.1 to resolve this issue.
What an attacker can do
Modify plugin data or settings without logging in.
Potential impact on your site
Unauthorized changes to freight quote settings or data could disrupt pricing or customer quotes.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
