Csomagpontok S Sz Ll T Si C Mk K Woocommerce Hez
Monthly
Missing authorization in the Hungarian WooCommerce pickup-points and shipping-labels plugin (versions before 4.2.8) allows unauthenticated remote attackers to perform actions that should be restricted to authorized users, resulting in high-integrity impact against affected WooCommerce stores. The flaw, classified as CWE-862 (Missing Authorization), means the plugin fails to verify whether the requesting party has the right to perform privileged operations - distinct from authentication failure. No public exploit or CISA KEV listing has been identified at time of analysis.
Missing authorization in the Hungarian WooCommerce pickup-points and shipping-labels plugin (versions before 4.2.8) allows unauthenticated remote attackers to perform actions that should be restricted to authorized users, resulting in high-integrity impact against affected WooCommerce stores. The flaw, classified as CWE-862 (Missing Authorization), means the plugin fails to verify whether the requesting party has the right to perform privileged operations - distinct from authentication failure. No public exploit or CISA KEV listing has been identified at time of analysis.