Active Woot Products Tables For Woocommerce 100 Free
Monthly
Authenticated users with only Subscriber-level WordPress accounts can rename arbitrary posts, pages, and WooCommerce products on sites running the Active Woot Products Tables for WooCommerce plugin before version 2.1.3, because several plugin AJAX actions perform neither capability nor CSRF nonce checks. Exploitation requires a valid low-privilege account (self-registration enabled or credentials otherwise obtained) and, for the CSRF route, a logged-in victim tricked into visiting a crafted page. Publicly available exploit code exists and the vendor has released a fix in 2.1.3; impact is limited to title/integrity tampering with no data disclosure, deletion, or code execution, so this is a low-to-moderate real-world risk.
Authenticated users with only Subscriber-level WordPress accounts can rename arbitrary posts, pages, and WooCommerce products on sites running the Active Woot Products Tables for WooCommerce plugin before version 2.1.3, because several plugin AJAX actions perform neither capability nor CSRF nonce checks. Exploitation requires a valid low-privilege account (self-registration enabled or credentials otherwise obtained) and, for the CSRF route, a logged-in victim tricked into visiting a crafted page. Publicly available exploit code exists and the vendor has released a fix in 2.1.3; impact is limited to title/integrity tampering with no data disclosure, deletion, or code execution, so this is a low-to-moderate real-world risk.