CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce: from n/a through <= 3.1.8.
Explanation of Vulnerability in Simple Terms
Stock Locations for WooCommerce versions up to 3.1.8 lack proper authorization checks, allowing authenticated users to modify stock location data they should not have access to. An attacker with a low-privilege account can change or delete stock information for products. This affects WooCommerce stores relying on this plugin for inventory management.
What an attacker can do
Modify or delete stock location data for WooCommerce products without proper authorization.
Potential impact on your site
Inventory data can be corrupted or deleted by unauthorized users, disrupting order fulfillment and stock accuracy.
Conditions required to exploit
Attacker must have a low-privilege WooCommerce user account (e.g., customer or contributor role).
Key dates
External resources
Related vulnerabilities
